网络安全已经成为工作学习不可缺少的一部分。

http://65.186.78.52/ submitted by /u/Akhenaten1049 [link] [comments]

Greetings. I'm wondering if it's possible to get into the cyber security field without a degree. I'm in my early 40's and I hate my blue collar career. I've always loved IT stuff and have been very good at it. I just never focussed on my school studies in the past (due to late diagnosis of ADHD). I did take some courses way back when I was laid off such as A+ and Network+ which I thought myself and had certifications for (now long expired) I know I could do well with this but I'm wondering since I'm older, that it might be too late to follow this dream. I can't go to school full time since I work full time. Something along the lines of ethical hacking sounds interesting to me. Is it possible to learn on my own and get into a cyber security career? Where should I start and what certifications would I need? Any tips or advice from any one that's been in a similar situation? I'm in Canada if country makes a difference. Thanks! submitted by /u/Darth_Rayzor [link] [comments]

I copy a potential malicious file and paste in a sandbox. Am I going to get infected by the copying file in say a email? How else could I get it to a sandbox submitted by /u/papervault [link] [comments]

I'm not sure if this is the right place to ask the question, sorry if its not. Its my works new policy that a computer cannot have a vpn connection into the office from a computer being accessed remotely. example: I have WorkPC in my closet, its got lots of ram, cpu, and i only install work apps on it. I have my HomePC that i use for most things that is mine, and i have nice multimonitor setup to go with it. I used to sit at HomePC, and remote desktop to WorkPC to do my work (both in my local network) but to do the work, once i'm connected to WorkPC, i connect WorkPC's vpn into work so i can checkout licenses and stuff. This is as of today blocked, so now i have to figure out how to move all my computers around to be able to get any work done. What is the threat they are trying to prevent? is it a realistic one? (how annoyed should i be right now?) any ideas how i should have my pcs setup? I also wanted the flexibility to connect to WorkPC from a laptop so i could do work from any location in my house, but this seems to break that too... it seems like my only solution is a work laptop + KVM switch + annoyance? Thanks. submitted by /u/rLarc [link] [comments]

It all started last week with Ubisoft and then a few days apart I keep getting the same thing from Microsoft, Mega and PayPal. I haven't clicked on any suspicious links and I do use a VPN only for a particular website, but never the ones I mentioned earlier and I haven't gotten on them in months. I checked my email address in https://haveibeenpwned.com and it was found in 5 breaches, so I guess I'm waiting for a 5th email telling me one of my accounts encountered suspicious activity. Right now I'm taking all safety precautions and changing my passwords and enabling Two-Factor Authentication where possible. But I'm still wondering why this is happening? submitted by /u/throacco19 [link] [comments]

TikTok disclosed a bug submitted by aidilarf_2000: https://hackerone.com/reports/1509057 - Bounty: $500

TikTok disclosed a bug submitted by s3c: https://hackerone.com/reports/1253462 - Bounty: $2373

Semrush disclosed a bug submitted by a_d_a_m: https://hackerone.com/reports/1464168 - Bounty: $2000

Please note: this article contains potentially triggering stories about child sexual abuse Continue reading on Medium »

Hello Guys This is Abdelrahman Attia today we will solve L’espion Challange From Cyber Defenders Continue reading on Medium »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

submitted by /u/SCI_Rusher [link] [comments]

Tomorrow (08.17, at 20:00 EEST) I will stream How I Develop a POC for CVE-2022-26923 on my Twitch: https://www.twitch.tv/lsecqt ​ Feel welcomed guys! submitted by /u/lsecqt [link] [comments]

submitted by /u/SCI_Rusher [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/Frank538 [link] [comments]

Hello Amazing People, Continue reading on System Weakness »

Welcome back readers. I hope everyone is doing well. I have decided to do a writeup on a DOM Based XSS I recently found bypassing WAF… Continue reading on Medium »

Cross-site scripting (often shortened to XSS) is a common security vulnerability that is more prevalent in web applications. Continue reading on Medium »

Censys Continue reading on Medium »

penulisa: lalualowan Continue reading on Medium »

Bug bounty hunter, Teacher and Father Continue reading on Medium »

Hey 👋 Continue reading on InfoSec Write-ups »

[HTB] Antique Writeup by 0x584a 更多最新文章，请访问SecWiki

Article URL: https://portswigger.net/daily-swig/multiple-cloud-vendors-impacted-by-postgresql-vulnerability-that-exposed-enterprise-databases Comments URL: https://news.ycombinator.com/item?id=32483937 Points: 1 # Comments: 0

submitted by /u/DFIRScience [link] [comments]

I'm very excited to share the first edition of, what's been in the works for almost 5 months now, "The Hitchhiker's Guide to DFIR"; a project started by Andrew Rathbun as a proof of concept for a crowdsourced and opensource approach to publishing. The idea was simply to gather a bunch of people willing to write a chapter of their own choosing covering their stories, knowledge or experiences within the domain of DFIR. V1 contains chapters from some well-known forensicators as you might already know them. You can also find my chapter indexed 8th and titled "Artifacts as Evidence" where I share some of the artifacts that I encountered in the wild. What began as a fun and collaborative project, has now resulted in this small DFIR book. I hope it sparks the interest of beginners, helps the practitioners and is refreshing for the professionals! Note: This is a free distribution, you don't have to pay anything on the Leanpub landing page. Hitchhiker's Guide to… by Andrew Rathbun et al. [PDF/iPad/Kindle] (leanpub.com) submitted by /u/Nisarg12 [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/ManaHoney504 [link] [comments]

https://www.7xr.nl/Music/ ​ There's also https://www.7xr.nl/games/ for games submitted by /u/neheb [link] [comments]

submitted by /u/taramj13 [link] [comments]

联邦调查局发出警告，自上周FBI在佛罗里达州突袭搜查前总统唐纳德·特朗普位于海湖庄园的住宅后，针对执法官员的网络威胁激增。

安全研究人员发现一个与macOS处理系统软件更新有关的注入漏洞可能会让攻击者访问Mac设备上的所有文件。

Sonatype 研究人员发现了一个名为“secretslib”的新 PyPI 包，旨在将无文件加密矿工投放到 Linux 机器系统的内存中。

作者：知道创宇404实验室APT高级威胁情报团队，K &Nan 1. 概述 Patchwork是自2015年12月以来一直活跃的南亚APT组织。该组织长期针对中国、巴基斯坦等南亚地区国家的政府、医疗、科研等领域进行网络攻击窃密活动。PatchWorkAPT是一个比较有意思的名字，源于该组织武器库是基于开源的代码拼凑而成(地下论坛、暗网、github等等)。知道创宇404实验室APT高...

作者：知道创宇404实验室APT高级威胁情报团队，K &Nan 1. 概述 Patchwork是自2015年12月以来一直活跃的南亚APT组织。该组织长期针对中国、巴基斯坦等南亚地区国家的政府、医疗、科研等领域进行网络攻击窃密活动。PatchWorkAPT是一个比较有意思的名字，源于该组织武器库是基于开源的代码拼凑而成(地下论坛、暗网、github等等)。知道创宇404实验室APT高...

FYI - crosspost to get more opinions Hi all - I know usually the posts are "I want to get into pentesting". I have the opposite predicament. I'm a internal OT/IT Pentester. I perform assessments on pretty much everything. SCADA, DCS, Web Apps, Authentication systems, Network, Active Directory, you name it. I've been doing this for about a year now and can see myself doing it for maybe 1 more year. Responsibilities other than pentesting: Purple team engagements with SOC build out red team infrastructure for testing exploits/TTPs Python, PowerShell, bash scripting/automation for tooling/workflows Reasons I'd like to leave: I travel about 6-7 times a year. I have a good balance and although I'm young - I prefer a role that is more structured and eventually I would prefer to tra…

Hi, I have been asked by our company’s head of cybersecurity to prepare monthly report related to cybersecurity technologies. What things report should contain? Can anyone share the suggestions or sample report? submitted by /u/techno_it [link] [comments]

How much code/what languages should I know beforehand before indulging in learning hacking methods, Red/Blue strategies and try to get certified in Cybersecurity to be able to breeze by and not struggle as much in comparison to not knowing and coding skills? submitted by /u/fawzi97 [link] [comments]

I've read some really bad articles saying that Tik Tok is overly permissive on Android. Could tik Tok in theory access the MFA codes on my phone if I scanned the QR codes to add them into either Authy or Google Authenticator before I installed Tik Tok? submitted by /u/cryptocritical9001 [link] [comments]

Authentication Integrity Non-Repudiation Confidentiality Is my question even correct? Because I'm seeing lots of books are saying symmetric encryption can't provide non-repudation. So, can we generalize for all symmetric cryptography? And what about asymmetric? Does it achieves all goals? submitted by /u/syavage [link] [comments]

r/AskNetsec As the title says, I'm trying to get the most secure and fastest connection possible. I work in the financial services industry and stream in my off-time so I have a couple of questions about online privacy and security. ​ Is there a benefit of using BOTH a dedicated proxy server and VPN at the same time? In my mind, the proxy server hide my IP address, then the VPN both hides the proxy IP address and encrypts the data. I set up my dedicated proxy server through Windows 10 directly. No issues whatsoever. If this the best and most secure method? I have 5 dedicated proxy servers and only using one that's managed by Windows 10? Several apps are set up through NordVPN with tunneling and a killswitch including Tor, Signal, OBS, and several other apps. When I try this with Google Chrome all while using my proxy server, it doesn't connect to the internet? Is there a fix for this? Should be noted, I'm able to use and connect to the internet through Chrome using my proxy server if I'm using the NordVPN Chrome extension - but the tunneling and kill switch isn't in place? Is there a fix for this? ​ The most secure way of browsing the internet is obviously using Tor with my proxy and VPN, but are there any other methods of increasing my privacy and security outside of using a dedicated proxy server and VPN at the same time? I'm open to suggestions of any sort. submitted by /u/fletchketchem [link] [comments]

Hi r/AskNetsec! I'm preparing myself for presentation regarding bots and botnets. I will be talking about types of bots like good bots, bad bots, and what they can do, how you can protect yourself againts them, some information about popular botnets that were used in recent years, how IoT devices are insecure and can be used to attack (Miraibot example), etc. One of my talking points is how in the recent years the prices of renting servers and services went down which makes creating botnets more affordable than ever. I wanted to provide some examples with pricing but this is where i stumbled into a wall. I've looked over more popular underground marketplaces and found only offers for buying bots to create your own botnet, training materials on how to create botnets, services for generating likes, subscribers or discord bots or DDoS. Nothing related to renting botnets infrastructure for attacks like spamming, credential stuffing, ransomware, password bruteforcing, etc. During my research I've found some articles regarding this topic, but they are pretty old and the prices themselves are all over the place. https://www.zdnet.com/article/study-finds-the-average-price-for-renting-a-botnet/ https://www.secplicity.org/2017/03/07/know-much-costs-rent-iot-botnet/ https://datadome.co/learning-center/what-is-ddos-booter-botnet-booter/ My kind question to You all is if you could provide me with some info on the pricing or screenshots of the offers if you have seen any recently? Direct links are most likely againts this subreddit rules, so only price and botnet type info and for screenshots the seller and any other details that could point to the particular marketplace/seller can be blurred. Thanks! submitted by /u/vlot321 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/Mysterii8 [link] [comments]

submitted by /u/mesok8 [link] [comments]

submitted by /u/derp6996 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/yarmak [link] [comments]

Devzat was a Medium ranked box on the HacktheBox platform involving heavy enumeration. The initial foothold is gained by identifying a… Continue reading on Medium »

Meta was a medium machine on HacktheBox. By identifying an additional virtual host, the user is able to find an API running exiftool… Continue reading on Medium »

HoaxShell é uma ferramentas desenvolvida em Python que gera payloads capaz de realizar o bypass no Windows Defender e em outros Antivírus… Continue reading on 100security »

TLDR; Continue reading on Medium »

eCPPT/PTP Writeup Continue reading on Medium »

After an exciting partnership announcement, we welcome Solace Finance as the newest bug bounty vault! Continue reading on Medium »

Starting today, Monday 15th of August 2022, the Vega Protocol is officially launching the Vega Bug Bounty Program! Continue reading on Vega Protocol »

Hello, Hackers 👋👋 Continue reading on Medium »

99% of bug hunters only use 1% of Amass’ potential… Continue reading on Medium »

Or how I learned that some bugs are truly rare Continue reading on InfoSec Write-ups »

In this section, I’ll explain what SQL injection is, describe some common examples, explain how to find and exploit various kinds of SQL… Continue reading on Medium »

Exploiting a Logic Vuln via IDOR. #Bugbounty Continue reading on Medium »

i bought the course for CHFI v9 from ec council a while ago and delayed writing the exam till now, now the exam is based on v10 and i know most of the content is same but the 2 new added modules are missing IoT Forensics , Dark Web Forensics. anyone know of any good resources where i can read about these topics myself. any help would be much appreciated, thank you submitted by /u/Top-Law8118 [link] [comments]

I have the opportunity to apply for a digital forensics position that will train. There is no digits forensic experience required. That being said, it is very competitive. If I wanted to gain some tangible skills to demonstrate I have some knowledge of computing, would you recommend getting CompTIA A+, S+, N+? Any others? I know these do not necessarily correlate directly with digital forensics. submitted by /u/invictusliber [link] [comments]

Hey r/ExploitDev - I was clearing out some things from my office this weekend and came across two Alfa 802.11b/g wireless cards and two DIR-601s. I used these a while back when I was doing the OSWP labs. [Timestamp](https://i.imgur.com/SvQhRyn.jpg) I spoke with the mods and they are cool with me doing a giveaway raffle for these. There is nothing fancy about the routers or the alfa cards (they are both old commodity hardware) but could be beneficial if you are looking to take the OSWP or starting to study the basics of 802.11 attacks. Raffle Terms: Comment to enter RedditRaffler will be used to select two winners approximately 24 hours from now I'll contact the winners via DM and ship you one Alfa card and DIR-601 "kit" seen in the above timestamp. I'll pay for the shipping costs. CONUS-Only shipping Minimum account age is 30 days Thanks! submitted by /u/Bowserjklol [link] [comments]

Article URL: https://arstechnica.com/information-technology/2022/08/zoom-patches-mac-auto-updater-vulnerability-that-granted-root-access/ Comments URL: https://news.ycombinator.com/item?id=32472030 Points: 14 # Comments: 2

【自动化赏金之路】初试3个月 收入10000块的总结 by BaCde SecWiki周刊（第441期) by ourren ModSecurity 自建规则之路 by SecIN社区 SANS 2022 年威胁狩猎调查报告 by Avenger 更多最新文章，请访问SecWiki

【自动化赏金之路】初试3个月 收入10000块的总结 by BaCde SecWiki周刊（第441期) by ourren ModSecurity 自建规则之路 by SecIN社区 SANS 2022 年威胁狩猎调查报告 by Avenger 更多最新文章，请访问SecWiki

国家网信办公开发布了境内互联网信息服务算法名称及备案编号，包括多个大型企业和产品的相关算法。。

Black Hat被公认为“黑客界的奥斯卡”，着眼于当下实际的安全态势，分享前沿的安全研究、安全产品和解决方案。

PCMag选出了本届大会上14个重磅研究成果，让我们通过本文来一一窥探。

Zeppelin 勒索软件于2019 年11月首次出现在威胁领域。

在黑客论坛上，通过暴露或破解的VNC访问关键网络的需求很高，在某些情况下，这种访问可以用于更深层次的网络渗透。

荷兰有关当局宣布，美国在阿姆斯特丹逮捕了一名加密货币混合器工作的软件开发人员。

《莫斯科时报》披露，黑客组织 Killnet 声称对航空航天和国防巨头洛克希德-马丁公司发动了一次大规模 DDoS 攻击。

澳大利亚公平竞争和消费者委员会称，谷歌因收集数据时误导用户，被处以6000万澳元(约合人民币2.88亿元)罚款。

Or how I learned that some bugs are truly rare Continue reading on InfoSec Write-ups »

No content preview

No content preview

Or how I learned that some bugs are truly rare Continue reading on InfoSec Write-ups »

No content preview

No content preview

Or how I learned that some bugs are truly rare Continue reading on InfoSec Write-ups »

No content preview

No content preview

OK so here goes! The first of my throwback sessions! Let’s go back to the weekend of 17th October 2020! Continue reading on Fitness Drinking Security Code »

submitted by /u/CodeXTF2 [link] [comments]

http://www.justbeefrecipes.com - plus 18 more websites, all accessible via the top bar. 91.3K recipes across all sites. Plain text, no images, basically a somewhat fancy opendir. Important to note that these sites only allow 200 requests per IP per day, however this is on a per-site basis. I stumbled across this while looking for more sources to put in version 2 of my cooking recipe archive. However, the aforementioned limit of 200 files per day is not at all ideal. wget and other utilities will carry on downloading after the limit, however the files downloaded will, instead of recipe content, contain an error mentioning this limit. I have a VPN that I can switch IPs with, which works fine, but the real issue is getting these download utilities to pick up where they left off. I haven't yet found a way to force wget or curl to pause downloading after 200 files, and let me switch IPs. This would also get pretty tedious very quickly - 91K recipes means around 455 manual IP switches in all (assuming no cross-site IP usage). ​ So I'm curious - has anyone else run into a site like this, and found a way to download it in an efficient manner? submitted by /u/WAUthethird [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/hydrogen18 [link] [comments]

submitted by /u/thorn42 [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/Plastic_Preparation1 [link] [comments]

submitted by /u/draebor [link] [comments]

Looked over the posts and here and not finding what I am looking for. Is there an easier way to grab files from Google Drive other waiting for the files to zip and then download? submitted by /u/belly_hole_fire [link] [comments]

can its protocols be changed submitted by /u/Iam_really_need_name [link] [comments]

Looking for the best courses/certs to get to improve my network security skills. Things similar to monitoring packets for malicious activity like DNS beaconing, investigating firewall IDS/IPS events, NGFW configuration, best practices, etc. submitted by /u/Professional-Dork26 [link] [comments]

Hey everybody. Currently I am trying to set up a virtual environment so that I can practice on it. I do have a couple of questions though. How would you guys recommend setting up a homelab? I use Fedora as my daily driver and then I have a Kali vm installed with KVM/Qemu via Virt-Manager. My initial plan was to whip up a Windows 10 vm in Virtualbox on my spare mac and then attack it with my Kali machine. I was going to set up the Windows box as 'Host-Only' so that it is isolated. But all the research and videos I have watched only show how to set up a 'Host-Only' network between two virtual machines on the same host computer. Is it possible to set up the scenario that I am describing? To isolate a windows machine on virtualbox and attack it on my other computer using virt-manager? I am under the impression that my 'vulnerable' box should be on the Host Only network mode just for security reasons. But if that is the case, how would I connect to it to attack it? I am pretty sure that what I am describing makes sense but if it turns out that I am wrong and it doesn't, I do apologize! I haven't been on my ethical hacking journey for very long so I am sorry if this is a dumb question or if it has a very simple answer. Thanks! TL;DR: How to isolate a Windows vm on virtualbox within my Mac OS Host and be able to attack it via my Kali machine via Virt-Manager on my Linux host. ​ P.S. Sorry if this isn't the right sub - I tried posting in an ethical hacking and cybersecurity sub but the first one hasn't gotten any replies and the latter deleted my post. Just trying to get some information on this so I can practice. submitted by /u/strings_on_a_hoodie [link] [comments]

I assume many people don't necessarily follow best practices in the digital world - download and run executables from dubious websites, for example. I wonder how prevalent is it for them to catch malware nowadays, provided they have a standard, up-to-date antivirus. Does most widespread malware exploit zero-day attacks and become detected by antiviruses after a few hours/days? How prevalent is more sophisticated malware that can stay undetected for weeks/months? Specifically, How hard is it for attackers to devise keyloggers and ransomware? submitted by /u/Curious-Brain2781 [link] [comments]

I’m a software dev with a some years of experience. I’ve always worked for security companies and on security products, so I have lots of exposure to the industry. I find that I like security way more than I like writing code. I’d like to make it my full time job. However, financially I can’t go back to square 1. I am looking for advice on how I can pivot to a true security career while not losing all of the seniority that I’ve built up. I think that security engineer is a logical spot to jump to, but I’m unsure. I am also curious if there are certs that I should pursue. My company will pay for them, but many seem to be either focused on red team (OSCP) or management (CISSP). submitted by /u/Weary_Drummer2211 [link] [comments]

I have an image of an HD from a 1 year old Dell desktop. It appears to be a windows NTFS but there are no users folders, many other typical windows folders are missing. The drive only has 9.5 GB of data out of 1TB. It is not zeroed, and the image is obviously not bootable. Trying to figure out what could have happened. submitted by /u/SquareEastern4454 [link] [comments]

submitted by /u/Simply4U2bu [link] [comments]

# For the purpose of this write-up, and the integrity of the company, we’ll consider that the target we’re testing is: >… Continue reading on Medium »

Read Time: 3 minutes Continue reading on Medium »

Been a few days folks, apologies. Orientation at the new job, getting more apartment stuff… it finally feels cozy and homely! Continue reading on Medium »

Continue reading on Bug Zero »

O cabeçalho de requisição User-Agent é uma cadeia de caracteres característica que permite servidores e pares de rede identificar a… Continue reading on 100security »

O PyPhisher é um gerador de Phishing de mais de 78 sites, dentre estes Facebook, Gmail, NetFlix, Tiktok, Twitter, Spotify e muito mais. Continue reading on 100security »

Tips on searching individuals and businesses through russian websites. Continue reading on Medium »

While I’m busy finding my way in open source research— and tip of the hat: I’m happy to announce that I’m already contributing to a number… Continue reading on Medium »

Summary of the espionage-related news stories for the Week 32 (August 7–13) of 2022. Continue reading on Medium »

云隔离的梦想 by ourren 云安全入门材料 by 路人甲 netspy-快速探测内网可达网段工具 by 路人甲 SnakeYaml反序列化 by 路人甲 Executor内存马的实现 by 路人甲 How I Hacked my Car by ourren 更多最新文章，请访问SecWiki

云隔离的梦想 by ourren 云安全入门材料 by 路人甲 netspy-快速探测内网可达网段工具 by 路人甲 SnakeYaml反序列化 by 路人甲 Executor内存马的实现 by 路人甲 How I Hacked my Car by ourren 更多最新文章，请访问SecWiki

研究人员只需要花费25美元，就能用小零件制作出硬件入侵工具，在星链卫星天线上运行任意代码。

Article URL: https://inthewild.io/blog/how-useful-is-cvss-score-in-CVE-triage Comments URL: https://news.ycombinator.com/item?id=32459335 Points: 1 # Comments: 0

submitted by /u/tbhaxor [link] [comments]

Around a month or so ago I saw on this subreddit a post which had a spreadsheet with all the exploit development certifications compared by topics which they covered but I can't seem to find it now. Does anyone have a link to that post or spreadsheet? If so I'd highly appreciate it. Thanks in advance. submitted by /u/xor_eax_eax_ [link] [comments]

submitted by /u/KeepYourSleevesDown [link] [comments]

In the Previous Blog, we know What is OSINT now we have to know what tools are used to do OSINT. Continue reading on Medium »

Can pentesters instantly become great bug bounty researchers? It may not be as trivial as one might think Continue reading on Medium »

Table of Contents Continue reading on Medium »

Intro: Continue reading on Medium »

Hello guys, I am back again with another writeup on my very recent bug finding on HackerOne Private VDP. In this writeup I am gonna tell… Continue reading on Medium »

Hello everyone. Myself Sagar Sajeev. Continue reading on Medium »

Have you heard about the daily bug bounty programs that invite programmers to find out issues with the software or app they have developed… Continue reading on Medium »

Hey Guys. I’m Sagar Sajeev . Continue reading on Medium »

Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades… Continue reading on Medium »

O PyPhisher é um gerador de Phishing de mais de 78 sites, dentre estes Facebook, Gmail, NetFlix, Tiktok, Twitter, Spotify e muito mais. Continue reading on Medium »

Utilizando o msfvenom conseguimos gerar payloads em MSI que podem nos auxiliar no processo de exploração do Windows e neste artigo… Continue reading on 100security »

O msfconsole possui um módulo auxiliar que permite que você inicie serviços tais como: FTP, Telnet, VNC, SMB, HTTP, MSSQL, PostgreSQL… Continue reading on 100security »

Details around thought process, tools and methods used would be highly appreciated! Even better if the answer is geared towards an enterprise/SOC environment. submitted by /u/Jaruki_Jurakami [link] [comments]

Bloom.exe seems to be adware, or a trojan. Malware, of some kind. What i'm wondering, is if someone has downloaded it to somewhere it won't work... and looked at it's code. And if so, what the language is. I have been getting into scripting... and i'm quite curious, about what language the more modern malware, is scripted in. Even something as simple as a screenshot, will probably satisfy my curiosity. submitted by /u/NinaMercer2 [link] [comments]

I included lots of details and context in my previous attempt to post this question, but it was deleted by mods due to not being narrowly cast, so I've tried to address that by asking a yes/no question even though my question is actually more about "how". I can reply with details but won't include them here for fear of my question being deleted again. submitted by /u/hc5u [link] [comments]

Say a hacker gets control of my computer and has access to my keystrokes. He can change any security settings of the Google account - disable 2FA, change the password, revoke backup codes, etc. - all this just by authenticating via the password (which he can get from the keystrokes). Google doesn't require the 2nd-factor authentication in this scenario (since the session is trusted - it's from my PC). I worry that this kind of attack might happen, and make me lose my Google account. Is there a way to somehow mitigate this risk and enforce 2FA for every such critical action? Reference: https://www.infoq.com/news/2020/07/google-password-2fa-woes/ Thanks! submitted by /u/Curious-Brain2781 [link] [comments]

Okay so i have this old neighbour ( lets call him A) that i had added on my Instagram account a while back but then we fell out and i blocked him . But then a couple months ago a received a message from an account which went by his name and he asked me to give him my Instagram account’s password and my phone number to help him recover his hacked account and i after going back and forth with him foolishly gave it to him . But after 30 minutes i realised he was going through my dms so I immediately blocked the account and changed all my passwords. Then i dmed A’s account , the one that i had blocked and was sure was his , and he claimed that it wasnt him and it was someone who was doing this to multiple of his followers. I have reason to believe that this is not true because i wasn’t even following him at the time and I believe the alleged fake account was him all along but i got past it and forgot about it . Now, just today I received a text by a stranger who is saying that he got a hold of A’s phone and found my chats and pictures in his gallery and is claiming that A somehow by using my phone number and my Instagram account hacked into my phone and any and every picture that i take on my phone is being saved on his phone . Now this stranger is asking for my lockscreen passwords and stuff telling me that he will help me out and “disconnect the septor” so that A no longer has access to my iphone but i ofc just blocked him because i am not ever giving any of my passwords out again and i think this too is a ruse . Although i cant help but be concerned for my privacy, so is it possible that someone can gain access to my iphone’s camera and gallery and stuff just through my Instagram account. I would really really appreciate some help here and an honest answer because i have no knowledge of anything regarding hacking and other things related to it. Thank you for reading . submitted by /u/Praise-bingus111 [link] [comments]

Kubernetes disclosed a bug submitted by amlweems: https://hackerone.com/reports/1378175 - Bounty: $2500

鼹鼠行动--针对QNAP网络存储设备的大规模攻击活动分析 by ourren 更多最新文章，请访问SecWiki

鼹鼠行动--针对QNAP网络存储设备的大规模攻击活动分析 by ourren 更多最新文章，请访问SecWiki

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/jwizq [link] [comments]

Article URL: https://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=32449426 Points: 2 # Comments: 0

That's a good question. You go into work every day, sit down at your desk, log in...but who actually "owns" the systems and network that you're using? Is it you, your employer...or someone else? Anyone who's been involve in this industry for even a short time has either seen or heard how threat actors will modify an infrastructure to meet their needs, enabling or disabling functionality (as the case may be) to cover their tracks, make it harder for responders to track them, or to simply open new doors for follow-on activity. Cisco (yes, *that* Cisco) was compromised in May 2022, and following their investigation, provided a thorough write-up of what occurred. From their write-up: "Once the attacker had obtained initial access, they enrolled a series of new devices for MFA and authenticated…

Article URL: https://lwn.net/SubscriberLink/904293/deab9aedc5522142/ Comments URL: https://news.ycombinator.com/item?id=32448962 Points: 1 # Comments: 0

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

In this blog, we are going to learn bout what server-side template injections are and how they work by solving Portswiggers labs. Continue reading on InfoSec Write-ups »

An unusual type of Cross-Site Scripting vulnerability made by emoticons Continue reading on Medium »

Tổng quan về SynFutures Continue reading on Medium »

Multiple ways to Bypass a File upload feature and chain it to an RCE. Continue reading on Medium »

Hello reader, I hope you are doing well. Today I want to talk about one of my findings. It was a public program and the bug is not fixed… Continue reading on Medium »

Testnet of a decentralized exchange from the ALEX2 project. Continue reading on Medium »

Namaste!! It’s me yours Aakash Tayal (Spoopyghost) this is my second write-up or we can say first write-up because my first write-up in… Continue reading on Medium »

Description: Continue reading on Medium »

What’s up everybody. My name is Sagar Sajeev. Continue reading on Medium »

Hi All. Reaching out to the community to see if you have any references for where to obtain free or cheap mock compromised server/computer/memory images to practice your forensic skills on. I’m a GCFE/GCFA holder but don’t get to directly utilize the level of forensic knowledge that is covered in those classes on a daily basis at work. I don’t want my knowledge and skills to lapse though and would like to practice on some images from time to time to keep those skills fresh. I’m hoping there might be some resources out there that allow for this. Thank you! submitted by /u/Ckn0wt [link] [comments]

submitted by /u/Schizophreud [link] [comments]

The latest "TCU Hashtopolis" (2022AUG08) has been released. This live distro automatically initializes the Hashtopolis Linux agent and adds it to your Hashtopolis cluster. This release includes a SSH server (u:user, p:live) so you can login to debug the agent if required which can be particularly helpful when a Hashtopolis task fails to benchmark your agent and the agent pulls itself out of the cluster. It also has hashcat included so if you stop the Passware Linux agent you can use it for direct hashcat jobs. See the README.pdf for more info. https://drive.google.com/drive/folders/1xkDBNCr-KBg8FTMvTc70sxm0nr-6qYCG?usp=sharing submitted by /u/atdt0 [link] [comments]

I don’t do this often. When I’m asked to I wing it most of the time. We are trying to see if there are options besides going to the person to do the capture. This person has an iPhone. Thanks. submitted by /u/hw60068n [link] [comments]

hey folks, I have alerts in my SIEM based on event ID 4728. Seems that there is similar log 4732. I understand someone added to some group in ad, but what is considered "security-enabled" in practice? You need to config in settings of ad object that it will be considered as security-enabled ? The group considered automatically when it have some high permission to something? Thanks. submitted by /u/Webly99 [link] [comments]

https://www.bleepingcomputer.com/news/security/us-govt-will-pay-you-10-million-for-info-on-conti-ransomware-members/ Saw that article today and it made me wonder if they really pay. I remember someone said they never do but, I can't remember who. submitted by /u/Chroll-On [link] [comments]

As the title suggests. They asked for a client cert they could trust for 2 way SSL, and when I gave them my self-signed cert they were concerned and said they couldnt accept self-signed certs. I am baffled as to why this is necessary, but before blindly thinking I know best I wanted to ask the community. Are there situations or reasons why this would make sense? submitted by /u/grasponcrypto [link] [comments]

Any advice for dealing with old servers that can’t be (easily) upgraded for various reasons? We’ve a handful of servers that are running old versions of CentOS and Debian - old old, like Centos 5 and 6 old. Even if Centos as a project hadn’t gone the way of the dodo, these servers wouldn’t be getting security updates any more. The obvious thing to do would be to migrate whatever they’re hosting to new servers and shut off the old ones, but logistically that’s not really a runner - at least not quickly. They’re running old, but still used, PHP applications built on old versions of Zend; updating these applications to work with more recent versions of PHP or retiring them entirely is a work in progress. In the meantime the servers have sometimes hundreds of vulnerabilities each. Any suggestions on what I can do to reduce the attack surfaces in the absence of being able to update/retire them? submitted by /u/deadlock_ie [link] [comments]

Hey all! I want to pick your brains on a topic. So, I'm looking into getting a SANS grad cert but it's a toss-up between the two in the title. I have done my research and found that either of these will fit my goal. I can honestly go either way but would like to get insight as to which one would be better over the two. I have around 5 or 6 years of cybersecurity experience and I've held a SOC title before. However, I would like to get more involved in both red/blue team shenanigans when possible lol. My company (thank the stars) is paying for this and I can always take more SANS courses with my education assistance program. So, filling in the blanks on areas I may not know won't be a problem. Now that..that is out of the way. I would like to get your thoughts on those cert programs as well as the pros/cons of them. I'm currently waiting on my GCIH material so once I pass that I will be entering one of these programs. I am very interested in having knowledge in pen-testing as well as advanced defenses and techniques. The CDO has courses that are very interesting and the certs I would get out of it are GREAT! and will really fortify my knowledge of hardening and automation. But the purple team has a little bit of both which will help me bridge the gap in some areas I'm weak in right now. (Side note: I wanted to do the pentest path but I'm not ready for that yet. So, I'll just take certs when I can after I complete one of the grad certs lol). Please don't judge my ADHD brain is all over the place right now hahaha. Hope to get some good feedback and hope that I explained my situation well enough. submitted by /u/StoneyW [link] [comments]

The private representation of interests before public entities, although a historically recurring fact, has been intensified locally in… Continue reading on Medium »

A company commits Greenwashing when it omits or lies about the environmental impacts of its products. Continue reading on Medium »

The market dynamics are not always harmonious: while some contracts are successfully closed, others are finished by one of the parties for… Continue reading on Medium »

As is well known, one of the biggest issues in execution proceedings or even in compliance with a court sentence is the creditor’s search… Continue reading on Medium »

In view of the needs that have grown along with the technological advance, the demand for means of obtaining and filtering data for… Continue reading on Medium »

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/monoimpact [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/juken [link] [comments]

submitted by /u/TravenDev [link] [comments]

https://github.com/A0RX/Red-Blueteam-party https://github.com/MantisSTS/RedTeamTools https://github.com/idchoppers/redTeaming https://github.com/irredteam/irredteam.github.io https://github.com/0xMrNiko/Awesome-Red-Teaming https://github.com/J0hnbX/RedTeam-Resources submitted by /u/ff6764 [link] [comments]

submitted by /u/tbhaxor [link] [comments]

Black Hat 2022上最值得关注的十大议题 by ourren 谈谈安全对抗的本质 by ourren 云沙箱视角看攻防演练：样本类攻击手法总结 by ourren 智能系统数据安全 by ourren Selenium自动化入坑指南 by ourren 浅谈NFT, Web3 和元宇宙 by ourren DevOps风险测绘之代码篇 by ourren “无数据知识蒸馏”术语 by ourren 更多最新文章，请访问SecWiki

Black Hat 2022上最值得关注的十大议题 by ourren 谈谈安全对抗的本质 by ourren 云沙箱视角看攻防演练：样本类攻击手法总结 by ourren 智能系统数据安全 by ourren Selenium自动化入坑指南 by ourren 浅谈NFT, Web3 和元宇宙 by ourren DevOps风险测绘之代码篇 by ourren “无数据知识蒸馏”术语 by ourren 更多最新文章，请访问SecWiki

Ok so I'm trying to execute the cve that I referenced on my local mac (version 11.6.1). I've looked at the original PoC at http://www.github.com/poizon-box/CVE-2022-22582. This doesn't produce any errors, but the exploit is supposed to take advantage of symlinks to overwrite priviledged files, anf I don't understand how that's supposed to work. If you couls help me it would be very appreciated. submitted by /u/GuillotineNamedJEff [link] [comments]

submitted by /u/0xor0ne [link] [comments]

Showmax disclosed a bug submitted by miron666: https://hackerone.com/reports/1663202 - Bounty: $150

My journey into discovering CVE-2020–15139 Continue reading on Medium »

在一次授权渗透测试中，得知测试目标是拿到权限或者关键用户数据。

持安科技创始人＆CEO何艺，受邀参会并分享《一个甲方安全创业者的自白》

权限是用户对一项功能的执行权力。

​ wget 是一个GNU开发的从网络上自动下载文件的自由工具。

企业数据安全治理是一项庞杂和繁重的工作，尤其在数安与网络安全、应用安全高度耦合的背景下，更具有极大的挑战性，需要一盘棋考量。

来源：Acronis作者：Alexander Ivanyuk（Acronis 产品与技术定位部资深总监）Candid Wuest（Acronis 网络防护研究部副总裁）目  录简介与摘要第一部分：2021年主要网络威胁和趋势第二部分：常见恶意软件威胁第三部分：Windows 操作系统和软件中的漏洞第四部分：2022 年安全预测第五部分：Acronis 就如何在当前和今后的威胁环境中保持安全提出的建

肆虐Android平台的银行木马 SOVA 卷土重来，和之前相比增加了更多的新功能，甚至还有可能进行勒索攻击。

美国国务院今天宣布悬赏1000万美元征集5名Conti勒索软件高级成员的信息。

该平台允许在不同的区块链网络之间无缝移动资产，例如将比特币转换为以太坊区块链。

Sometimes, software security seems to be created with a loophole for attackers to exploit, various ways to manage such vulnerabilities… Continue reading on Medium »

Sometimes, software security seems to be created with a loophole for attackers to exploit, various ways to manage such vulnerabilities… Continue reading on Medium »

No content preview

We are going to talk about “Excessive Data Exposure” in this post that we are making for API Security. Continue reading on InfoSec Write-ups »

No content preview

We are going to talk about “Excessive Data Exposure” in this post that we are making for API Security. Continue reading on InfoSec Write-ups »

No content preview

We are going to talk about “Excessive Data Exposure” in this post that we are making for API Security. Continue reading on InfoSec Write-ups »

Article URL: https://www.tomshardware.com/news/new-vulnerability-affects-all-amd-zen-cpus Comments URL: https://news.ycombinator.com/item?id=32434119 Points: 3 # Comments: 1

I'm not in netsec myself. A shady colleague recently asked me if he could "check something" on a macbook I use at work. I asked what it was and he said it was photos related to his side-gig (artist). I said "No, I'm not comfortable with that, why not check it on your own laptop?", but I wasn't standing close enough to my desk to physically stop him. he said "It'll just take a minute" and stuck a USB drive in my macbook. 100% my fault for leaving it unlocked, I was literally 3 feet away on the other side of a half-height cubicle wall helping a colleague with a question at their desk, and I should know better. As soon as I saw him stick the drive in I walked back toward my desk, when I got close enough to see the screen he yanked it out and said "That's all I needed, thanks" and walked away. I plan on contacting our trust & safety team, but because of this colleague's position they will see the report at the same time the T&S team does, and because of previous experiences with this colleague I fully expect that (a) there was something malicious on the drive and (b) they'll start working on a cover story immediately after I send my report. What can I look for as evidence that something malicious happened (if something malicious did actually happen) before reporting it, so that it can be included in the report, and minimize their time to come up with a cover story for anything objectionable they did? For all I know it was innocent (just checking color profiles of some photographed works on a retina screen or something? idk) but given the fact that I asked him not to and he did anyway (as well as past experience with this guy) I'm suspicious. e: I know virtually nothing about macs, just have to use one at work. submitted by /u/No_Manufacturer_4701 [link] [comments]

Ive rare time off and am going thru backlog of redteam trainings/materials/posts/talks/ and blogposts. I notice a lot of I notice lotta Powersploit or Powershell C2s. Esp on blogs. Those ones I understand as usually they're from individuals who doesnt have an entity bankrolling expensive toolsets. I am also aware that PSH has been quite thoroughly swisscheesed by blueteamers these days. I'm thinking it's rather irrelevant to do anything with PSH materials based on my experience using Cobalt Strike we're reliant on BOFs and .NET assys. Especially to evade sophisticated AVEDRs. Buy I've not worked in enough variety of shops yet. Tho many moons ago listen to a 10minSecurity (or might've been called 7minSecurity) podcast where it seemed like they used such tools at a commercial firm. Altho, iirc it also seemed like the owner was newly getting this firm up and new in pentesting~teaming space which is why he might be been using such tooling. TLDR: Not sure if it is worth going thru these Powersploit/Empire/other psh centered tool still? Also I've never done a NCCDC but might do one in the future for shits and giggles. Is is psh tooling they use? submitted by /u/blabbities [link] [comments]

Hi all, We're currently reviewing a number of solutions for a monitor SOC/SIEM. This is relatively new to me so I'm just attending meetings with my managers and vendors just for the experience. We're a small one site business , 150+ userbase, mostly Windows on prem/Azure/M365 and a firewall and VPN (which is our main tool for remote work). ​ I am wondering if there's anything in particular I should watch out for during the meetings? Is there a list of features or requirements that would be almost standard? submitted by /u/DaithiG [link] [comments]

Hey guys, I'm working on creating a media drop off / baiting usb drive. Goal: Create a USB stick to drop it in the parking lot, at the reception or at a desk, bait the user to insert it to a computer and click on the contents - calling to my server to know they clicked. Current plan and try: I created a file called windows.bat on the drive, which is set to be hidden. The batch file basically does a curl to a specified endpoint ( a server I control, allowing me to know they opened it), which after that outputs some troll stuff, so the employee knows they got tricked. That endpoint also includes the output of "hostname" and "whoami", so I know, who it was, that clicked on it. I then created some shortcuts like "Private" (with a folder as symbol) or "Vacation-Photos of Monica" or "Tax-Report 2021" etc, that all point to that batch file. Besides the fact, that they have the shortcut arrow symbol, it looks "authentic enough" for most employees propably. The problem: those shortcuts include the drive letter, which varies from device to device. So like this, it won't work. I though about if its possible to use relative paths for the shortcut, but this doesn't seem to be too easy in windows (or basically not possible at all). Do you guys have any other idea on how to get this working? The only thing, that "the opened file" has to do is somehow access this endpoint and the user should be somehow baited in clicking and opening this tempting looking file. submitted by /u/namelessOnReddit_ [link] [comments]

Waveform image of a part of the audio: https://imgur.com/a/x2pkEj7 submitted by /u/AlternativeResult448 [link] [comments]

I’m doing some research and want to hear what NetSec folks think of services like CloudShark and apackets.com which let you upload pcap files and analyze them. Do you use any online services to view pcap files? If not, is sending traffic captures to a third-party the biggest concern? submitted by /u/codebyamir [link] [comments]

The host field contains porn sites, but the destination IP is the victim company. submitted by /u/Free-Roaming-Orange [link] [comments]

Internet Bug Bounty disclosed a bug submitted by s1r1u5: https://hackerone.com/reports/1647287 - Bounty: $2400

Shopify disclosed a bug submitted by 0x50d: https://hackerone.com/reports/1417288 - Bounty: $2900

Top Echelon Software disclosed a bug submitted by hammodmt: https://hackerone.com/reports/1663363

Hyperledger disclosed a bug submitted by bhaskar_ram: https://hackerone.com/reports/1664244

Top Echelon Software disclosed a bug submitted by sohelahmed786: https://hackerone.com/reports/712321

PortSwigger Web Security disclosed a bug submitted by mr_vrush: https://hackerone.com/reports/1541301 - Bounty: $150

Article URL: https://www.vice.com/en/article/m7gb7y/researchers-find-vulnerability-in-software-underlying-discord-microsoft-teams-and-other-apps Comments URL: https://news.ycombinator.com/item?id=32430582 Points: 1 # Comments: 0

Article URL: https://github.com/Wack0/CVE-2022-21894 Comments URL: https://news.ycombinator.com/item?id=32429156 Points: 4 # Comments: 0

Article URL: https://www.scmagazine.com/editorial/analysis/compliance/stats-say-chinese-researchers-are-not-deterred-by-chinas-vulnerability-law Comments URL: https://news.ycombinator.com/item?id=32423207 Points: 2 # Comments: 0

submitted by /u/0x00rick [link] [comments]

submitted by /u/digicat [link] [comments]

submitted by /u/SCI_Rusher [link] [comments]

submitted by /u/darronofsky [link] [comments]

submitted by /u/doitsukara [link] [comments]

submitted by /u/sanitybit [link] [comments]

A complete roadmap for young computer security aspirants Continue reading on Medium »

Testnet децентрализованной биржи от проекта ALEX2 Continue reading on Medium »

Todo mundo já deve ter visto o token do JWT (JSON Web Token) normalmente usado pra autenticação em SSO (Single Sign-On). O JWT e feito pra… Continue reading on Medium »

Hello everyone🎉 !!! I hope you all are doing well. Continue reading on Medium »

Hello, fellow Bug Hunters! It’s me again Jefferson Gonzales, and in this article, I’ll tell you about how I got my dream Dutch Government… Continue reading on Medium »

Article URL: https://github.com/Wack0/CVE-2022-21894 Comments URL: https://news.ycombinator.com/item?id=32429156 Points: 4 # Comments: 0

Article URL: https://googleprojectzero.blogspot.com/2022/08/the-quantum-state-of-linux-kernel.html Comments URL: https://news.ycombinator.com/item?id=32420147 Points: 2 # Comments: 0

Since the Russian invasion of Ukraine, the attention of OSINTers took a sharp turn east. A large number of “expert” accounts emerged on… Continue reading on Medium »

submitted by /u/SCI_Rusher [link] [comments]

I was a web application developer in 2010 when I learned about pentesting. I fell in love with the idea that I could get paid to break… Continue reading on Walmart Global Tech Blog »

The find command is among the most useful tools in the arsenal of Linux system administrators. The find command searches a directory… Continue reading on System Weakness »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

美的集团传闻遭遇勒索攻击，工厂多处电脑中了勒索病毒，导致内网系统连不上，所有文件都无法打开。

网络犯罪已经进入了一个新的时代，黑客不再仅仅为了刺激而发起攻击。

Sophos X-Ops在报告中称某汽车供应商的系统在5月的两周内被三个不同的勒索软件团伙入侵。

各位Buffer周末好，以下是本周「FreeBuf周报」！

不断发展/扩展沉浸式体验、加速人工智能自动化和优化技术专家交付。

一家汽车供应商的系统在 5 月的两周内被三个不同的勒索软件团伙破坏并加密了文件。

思科证实，Yanluowang勒索软件集团在今年5月下旬入侵了公司网络，攻击者试图以泄露被盗数据威胁索要赎金。

共同探讨”钓鱼邮件背后的故事”中解密在钓鱼邮件后隐藏的惊天玩法。

因窃取 Twitter 用户有关的私人信息，并将数据交给沙特阿拉伯政府，美国公民Ahmad Abouammo将最高面临 20 年的监禁。

I have a noname SD card that comes from a car-navigation system and it contains a lot of data. It is possible get the data by connecting the card to the navigation system and to a computer at the same time. This way, the navigation system seems to unlock the card and it gets mounted by my computer. I would prefer not to use the navigation system in this process but when i connect the card to my computer only, i can't access it. There is just a generic scsi driver available. Do you know anything like this? Is it possible to "lock" or encrypt the SD card? submitted by /u/Knuust [link] [comments]

A collection of aggregated open proxies across the internet, cross-examined and maintained every 15 minutes via automation. Link: https://Oproxy.ml Source Code: https://github.com/midhunvnadh/Open-Proxy-Project https://preview.redd.it/zib9r1kp93h91.png?width=1280&format=png&auto=webp&s=e5c9a464a4151d5028340346f2198737f55938cd submitted by /u/MidhunVNadh [link] [comments]

The Windows Registry is a magical place that I love to research because there's always something new and fun to find, and apply to detections and DFIR analysis! Some of my recent research topics have included default behaviors with respect to running macros in Office documents downloaded from the Internet, default settings for mounting ISO/IMG files, as well as how to go about enabling RDP account lockouts based on failed login attempts.  Not long ago I ran across some settings specific to nested VHD files, and thought, well...okay, I've seen virtual machines installed on systems during incidents, as a means of defense evasion, and VHD/VHDX files are one such resource. Further, they don't require another application, like VMWare or VirtualBox. Digging a bit further, I found this MS documen…

submitted by /u/jwizq [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/Fugitif [link] [comments]

submitted by /u/MiguelHzBz [link] [comments]

submitted by /u/EspoJ [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Gallus [link] [comments]

Introduction: Continue reading on Medium »

Hello folks, I’m Mohamed Tarek aka Timooon at Bugcrowd and HackerOne, In this write up I will explain how I get the victim’s session when… Continue reading on Medium »

This story is all about a logical vulnerability which helped me in Bypassing the email confirmation process and adding any arbitrary… Continue reading on Medium »

Hi everyone! This is my first write-up, pardon me for any mistakes. I’ll share my tip with everyone how I was able to bypass a 403… Continue reading on Medium »

Identifying subdomains more reliably by checking DNS status codes and empty nodes Continue reading on SSE Blog »

Gas is liquid gold. Back in February 2022, we found a way to abuse a feature called “Gasless Deposits” on dYdX exchange that could allow… Continue reading on Medium »

Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades… Continue reading on Medium »

I am trying to get ossim to send me an email when a specific file is accessed. I have already set everything up so that OSSIM will send me an email when a file is accessed BUT I am trying to make it more granular to send an email when a specific file is accessed. Currently in Define Logical Condition I have PBE: FILENAME == "D:\Depts\Shared\test.txt" This does not trigger an email when I open the file. I can see in the event logs that the event is there and if I delete out the PBE and set condition to ANY, I will receive an email after opening this file. Any suggestions? I have tried different spacing, caps/no caps, etc. It appears to work on my other Actions when I filter by specific usernames, but not for FILENAME. submitted by /u/Sufficient-Bed2280 [link] [comments]

Hi guys, I change my device, my public Dynamic IP, username, password, email, browser, app, cookies, and everything and again Instagram knows it's me, and my question was do you know IG can spot public dynamic IPs are coming from the same person or they know me another way? (because in this case I used a proxy and the problem was solved! though dynamic IP didn't help). I know of device fingerprinting but because I change everything I don't think it's the case. this case only affects me not persons in my region so it's not related to geolocation which is rough and not exact. what Instagram does is illegal in this case considering tracking this way without knowledge of the user. submitted by /u/amir_hossein0001 [link] [comments]

Our company cyber security insurance identified Fortinet Fortigate VPN as a high risk due to "numerous critical code exploits". Instead they are pushing Zscaler or other ZTNA solution. submitted by /u/brainstormer77 [link] [comments]

I found various sources that claim that TCG Opal isn't really secure compared to something like LUKS/dm-crypt encryption (for example this video), but I don't seem to fully understand under what circumstances that is actually true. It looks like the standard itself isn't the problem, but rather the implementation of the SSD manufacturers. Is that true and how "dangerous" would it be to only use that encryption on a modern laptop with one of the latest SSDs and a standard threat level? Hope this is the right sub & thx in advance. submitted by /u/-_----_-- [link] [comments]

Hi looking for advice I got a phone from a house clearance, everything in the house was going to the trash anyway ready for a new tenant to move in, the phones not amazing but it's better than my current one. Just wondering if resetting it would remove any potential weird things like tracking/spying software? Just got me a bit paranoid that the house was weird and full of other phones and watches... I got the feeling a drug dealer may have lived there previously. But wondering if resetting this phone will make it safe to use? It's a Samsung. submitted by /u/Spliceofcake [link] [comments]

Is there a way to log when a user views only their own password/secrets? or when a user views any password in general ? submitted by /u/No_Cranberry_2292 [link] [comments]

Hello everyone, I have a question for people who have Tenable.ad in their infrastructure. We have had some feedback from Golden Ticket on our Tenable.AD tool. As a precaution, we shut down our infrastructure for security reasons before reopening it. According to our initial analysis, this could be a false positive alert. Have you ever had this on your Tenable.ad. If so, through what means? Through authentication on a server? A machine account (ex: hostname$) Thanks a lot for your help :) submitted by /u/Captain_AdamBzh [link] [comments]

I have read this blog generally talking hidden IP address of deepfake pornography website owner who victimized over 190 Kpop idols. https://blog.criminalip.io/2022/08/04/deepfake-porn-site/ They said they can find real IP hidden behind cloudflare using nslookup. But they ended in a vague sense. Does anybody can tell specificaly how to check Real IP that is hidden by vpn, proxy, or cloud flare and etc. I really want and need more details on this... thanks! submitted by /u/Glad_Living3908 [link] [comments]

submitted by /u/One_Appeal_4080 [link] [comments]

The qualifications for the internship: Has or is pursuing all of the following -pursuing a relevant bachelor's degree -good communication skills, can work within a team and meet deadlines -basic knowledge of network protocols My first interview wasn't a technical interview. The interviewer just asked me basic questions about myself to get to know me and why I wanted to intern at their company specifically. She informed me that the second interview will be done by three people: two security consultants from their red team and a manager of business solutions. To give some insight as to what the internship will be like, during my first interview I asked my interviewer what to expect to be doing day to day. She told me I would be working alongside the red team on their current project. I would also work on the helpdesk a little. And I would get to work with the business consulting team as well to see how they meet with clients. This is all to try to give me different aspects of what their company does and give me solid hands on experience. She did say primarily though that the internship focuses on working with the red team. My question is what should I expect from the second interview? Are they expecting me to be able to answer technical questions about pentesting? I have some experience doing CTF's. I am by no means a master at them but I have been doing them everyday to try to learn more and improve. Any questions that I should expect to see so I can prepare for them? Any advice would be appreciated! Thank you in advance! submitted by /u/tyllanth [link] [comments]

BlueSky ransomware is an emerging family that has adopted modern techniques to evade security defenses. Read our technical analysis. The post BlueSky Ransomware: Fast Encryption via Multithreading appeared first on Unit 42.

Article URL: https://medium.com/airbnb-engineering/sisyphus-and-the-cve-feed-vulnerability-management-at-scale-e2749f86a7a4 Comments URL: https://news.ycombinator.com/item?id=32415629 Points: 1 # Comments: 0

Article URL: https://medium.com/airbnb-engineering/sisyphus-and-the-cve-feed-vulnerability-management-at-scale-e2749f86a7a4 Comments URL: https://news.ycombinator.com/item?id=32415629 Points: 1 # Comments: 0

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

[HTB] Apocalyst Writeup by 0x584a 更多最新文章，请访问SecWiki

[HTB] Apocalyst Writeup by 0x584a 更多最新文章，请访问SecWiki

Identifying subdomains more reliably by checking DNS status codes and empty nodes Continue reading on SSE Blog »

What is automotive cybersecurity? Continue reading on Medium »

Identifying subdomains more reliably by checking DNS status codes and empty nodes Continue reading on SSE Blog »

(Ragionamento breve per una estate OSINT-addicted) Continue reading on Medium »

Hey everybody. I am looking for sth that could help me improve my forensic skills. Idea is that there is a case, i can view some logs and i have to tell what happened and if machine was compromised or not. After looking through the logs I can check the answer. Any ideas if there is sth like that online? Thanks! submitted by /u/Full-Plankton-7607 [link] [comments]

Hi All, I found a problem in acquisition of a OPPO A54 5G with UFED 4 PC. I try Advanced Logical and Android Backup. I use dongle and set up the smartphone as directed by UFED (debug USB, allow App, always on), however the extraction fail always. Normally, at the beginning of an acquisition, the PC authorization request appears on the smartphone, but in this case it did not happen. I think this is the problem. Has anyone never happened? What to do in this case? Thanks! submitted by /u/Max_Steiner [link] [comments]

Hi all, I need to found the correct way to execute a preview of computer's hard disk, that allows me to see the files inside them like Encase would. I start the pc with linux live on USB. I can use Kali, Caine, Backbox or tsurugi; these guarantee me that the disk are write protect. At this point, without create a disk image, which software, in these linux distro, can I use to preview the hard disk like encase? thanks! submitted by /u/Max_Steiner [link] [comments]

Hi friends, I recently upgraded Cellebrite UFED to the most recent update. Upon completing this, all USB ports on the machine became inactive. There are about 20 ports between the front and the back of this machine. The keyboard and mouse quit working, all plugged in USB drives were unrecognized. After uninstalling Cellebrite completely, all USB ports became active again. However, now, our EnCase dongle is unrecognized. Has anyone run into this issue? I found one article from 2020 and this is a known problem with UFED. submitted by /u/Fun_House2633 [link] [comments]

Hyperledger disclosed a bug submitted by cet2000: https://hackerone.com/reports/348090 - Bounty: $500

Acronis disclosed a bug submitted by mega7: https://hackerone.com/reports/1538004 - Bounty: $200

一款 x64dbg 自动化控制插件，实现远程动态调试，解决了逆向工作者分析漏洞，反病毒人员脱壳，原生脚本不够强大的问题，加速漏洞利用程序的开发，辅助漏洞挖掘以及恶意软件分析。

与双栈技术和隧道技术相比，IPv6转换技术具备改造周期短、成本低、部署灵活等优势，是目前各大政企网站进行IPv6升级改造的主要方式。

《云计算安全责任共担模型》行业标准已于2022年7月正式发布施行。

Tomcat 一些漏洞复现

攻击者还试图利用银行平台上的一次性有效密码（OTP）将资金直接转入其账户上。

Check Point的安全研究人员在Python软件包索引（PyPI）上发现了10个恶意软件包。

近期美国网络安全和基础设施安全局 (CISA) 在其已知利用漏洞目录中增加了两个漏洞。其中一个已经在Windows支持诊断工具(MSDT)中作为零日漏洞了潜在了两年多的时间，并且它具有公开可用的漏洞利用代码。这两个安全问题的严重程度都很高，并且是目录遍历漏洞，可以帮助攻击者在目标系统上植入恶意软件。该漏洞编号为CVE-2022-34713，非正式地称为DogWalk，MSDT中的安全漏洞允许攻击者

近期美国网络安全和基础设施安全局 (CISA) 在其已知利用漏洞目录中增加了两个漏洞。其中一个已经在Windows支持诊断工具(MSDT)中作为零日漏洞了潜在了两年多的时间，并且它具有公开可用的漏洞利用代码。这两个安全问题的严重程度都很高，并且是目录遍历漏洞，可以帮助攻击者在目标系统上植入恶意软件。该漏洞编号为CVE-2022-34713，非正式地称为DogWalk，MSDT中的安全漏洞允许攻击者

有至少 76 名员工的个人或工作手机号码收到了钓鱼短信，一些短信也发送给了员工的家人。

This was posted a year ago, but is still up with content people might be interested in if they missed this post (https://www.reddit.com/r/opendirectories/comments/ox9ife/08032021_daily_post/) http://195.154.165.20/data/TDownloads/ submitted by /u/JiminythecricketinOz [link] [comments]

Hi all :) Im currently started taking the OSED course from offsec, and my lab is starting to run out (30 days). I kinda finished all of the excercises there anywhy. Is there any recommendations on exploit excercises/sites focusing on win-x86 I can take? Monthly subscriptions sites are also fine if they are worth it Excercises including RE is fine, but even better are ones with only a "poc" script(acess violation) as I feel my main focus should be on the exploit building thank you! submitted by /u/Tasty_Diamond_69420 [link] [comments]

submitted by /u/biggorilla135 [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/TheDarthSnarf [link] [comments]

submitted by /u/pigoretee [link] [comments]

submitted by /u/domenukk [link] [comments]

submitted by /u/g_e_r_h_a_r_d [link] [comments]

submitted by /u/catlasshrugged [link] [comments]

Article URL: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1039 Comments URL: https://news.ycombinator.com/item?id=32404209 Points: 2 # Comments: 0

Article URL: https://security.paloaltonetworks.com/CVE-2020-2038 Comments URL: https://news.ycombinator.com/item?id=32400260 Points: 1 # Comments: 1

The ‘red-team’ penetration test simulates real attack scenarios (“Friendly Hacking”) by bypassing security defenses while remaining… Continue reading on Medium »

This is a continuation of the amazing Common & Uncommon Interview Questions for VAPT. If you haven’t read the first article you can find… Continue reading on Medium »

Glassdoor disclosed a bug submitted by emanelyazji: https://hackerone.com/reports/1639802 - Bounty: $3000

HackerOne disclosed a bug submitted by jobert: https://hackerone.com/reports/1663299

A comprehensive example of testing at every layer. Continue reading on Udacity Eng & Data »

A comprehensive example of testing at every layer. Continue reading on Udacity Eng & Data »

Article URL: https://security.paloaltonetworks.com/CVE-2020-2038 Comments URL: https://news.ycombinator.com/item?id=32400260 Points: 1 # Comments: 1

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Tropical Scorpius has been deploying Cuba Ransomware using novel tools and techniques, such as a new malware family, ROMCOM RAT. The post Novel News on Cuba Ransomware aka Greetings From Tropical Scorpius appeared first on Unit 42.

如何导入数十亿DNS数据到Elasticsearch中 by BaCde Fuzzing 之 Grammars by 路人甲 SharpTongue Deploys Clever Mail-Stealing Browser Extension by 路人甲 更多最新文章，请访问SecWiki

如何导入数十亿DNS数据到Elasticsearch中 by BaCde Fuzzing 之 Grammars by 路人甲 SharpTongue Deploys Clever Mail-Stealing Browser Extension by 路人甲 更多最新文章，请访问SecWiki

submitted by /u/littlepreptalk [link] [comments]

!!!DO NOT GO TO THESE SITES PROMISING FREE STUFF, ITS ALL A SCAM AND THEY WILL HACK YOU NO MATTER WHAT YOU DO!!! This site used to belong to a school located in India, which apparently was botted out by hackers. This website would fill up with a load of PDF Files with scams in them. Some are fake "I'm not a robot" verifications, some are Free Robux scams, some are relating to Minecraft scams, and many more. Files that belonged to the school still remain though. And another thing, files that belong to the school have names and important information on the PDF's. Read them at your own risk. There's now a new website that belongs to the school, and it still exists today, a school located in India named "Salwan Public School, Gurugram". If you want to check it out for yourself, here are the links: Hacked Indian school website New Indian school website (not hacked) Basically it's the same domain but the new website removed the "www" in the link. submitted by /u/SinisterYT06 [link] [comments]

https://www.cadosecurity.com/cado-community-edition/ submitted by /u/zenomeno [link] [comments]

submitted by /u/cybersocdm [link] [comments]

Does anyone know how can I export the entire Confluence for the organization? It seems that native export is missing calendars and blogs. submitted by /u/urengoy [link] [comments]

I have a laptop coming in for forensic examination and I am nervous. The edr software we have on it has a quarantine feature that failed. So far I have remotely shutdown the computer, reset the users password and disabled the computer account in AD. I am afraid when I turn it on it will auto connect to the company wifi. I dont have a faraday cage, but would a switch just connected to a power source and nothing else be sufficient?? submitted by /u/Enes_24 [link] [comments]

Introduction Continue reading on Medium »

Since the emergence of DeFi, the congestion and high GAS fees of the Ethereum has hit heated discussions and led to the emergence of many… Continue reading on TOP Network »

gitbook for keeping my pentest notes on hand. It’s far from being perfect in terms of organization (that’s why I call it “promiscuous”)… Continue reading on Medium »

If you’re looking for a way to gain confidence, earn some extra money and get a job as a penetration tester, then bug bounty might be for… Continue reading on Medium »

submitted by /u/cybersocdm [link] [comments]

据报道，美国有超过 4 万人报告无法使用谷歌搜索，还有英国、澳大利亚、新加坡的用户也都报告了谷歌宕机问题。

现诚邀本土网络安全厂商积极参与，踊跃报名！

本系列文章共分为8篇，主要分享作者自身在企业网络安全建设和运维保障过程中的经验总结，包括网络安全管理、网络安全架构、网络安全技术以及安全实践等，力求全方位阐述企业在网路安全中的方方面面，为企业网络安全

本系列文章共分为8篇，主要分享作者自身在企业网络安全建设和运维保障过程中的经验总结，包括网络安全管理、网络安全架构、网络安全技术以及安全实践等，力求全方位阐述企业在网路安全中的方方面面，为企业网络安全

2022-8-9 23：58：59

研究人员认为，攻击者以后会越来越多地使用容器类文件进行投递，减少对宏代码附件的依赖。

Facebook母公司Meta披露，它对南亚的两个攻击组织采取了反制行动，这两个组织都是利用其社交媒体平台向潜在目标分发恶意软件。

Twilio表示，有攻击者利用短信网络钓鱼攻击窃取了员工凭证，并潜入内部系统泄露了部分客户数据。

因遭受了网络攻击，丹麦7-11门店的支付和结账系统全面故障，故而选择闭店。

Hi, I checked the open TCP connections on my machine using Sysinternals TCPView. I saw that I have open connections from Chrome to ports 8008 and 8009 on a machine in my LAN. It seems like the address of my Xiaomi Mi Box. I noticed that when I open Chrome/Firefox/Edge it automatically connects to this address and ports. I performed a quick Google search, didn't find too much information about these ports, but some mention them as related to Chromecast. I'm trying to understand if this is something legit, and what makes by browser automatically connect to this address, is there some sort of auto discovery process for these devices? Or is it possible (hopefully not) that I have some malware? Any information will be appreciated. Thanks, Gabriel submitted by /u/gabrielszt [link] [comments]

I used FonePaw data recovery tool's android root feature to root my phone. The recovery failed, but I sure as hell am rooted. Certain apps on my android homepage has changed location several times without me doing it. Sometimes I see my phone light up like getting a notification but don't get anything. Is my phone compromised? submitted by /u/remidentity [link] [comments]

作者：时钟@RainSec 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org Fuzzing input Fuzzing的一大核心思想其实就是通过大量的Input去触发程序的各个分支逻辑，因此Fuzzing的成功与否和Input的生成关系密切。Input的格式多种多样，可以是文件，代码，json数据等等。但是各种各样的...

作者：Y4tacker 原文链接：https://tttang.com/archive/1692/ 写在前面 之前周末忙着强网杯，对这道题只做了一半就搁置下来了，最后卡在绕过最新pebble模板引擎RCE那里，今天抽空来继续进行剩下的分析，正好题目里有几个在现实场景当中能用的trick顺便也分享了 题目环境分析 也是挺不错题目直接给了docker环境便于本地搭建，同时设置了权限需要执行./g...

作者：时钟@RainSec 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org Fuzzing input Fuzzing的一大核心思想其实就是通过大量的Input去触发程序的各个分支逻辑，因此Fuzzing的成功与否和Input的生成关系密切。Input的格式多种多样，可以是文件，代码，json数据等等。但是各种各样的...

作者：Y4tacker 原文链接：https://tttang.com/archive/1692/ 写在前面 之前周末忙着强网杯，对这道题只做了一半就搁置下来了，最后卡在绕过最新pebble模板引擎RCE那里，今天抽空来继续进行剩下的分析，正好题目里有几个在现实场景当中能用的trick顺便也分享了 题目环境分析 也是挺不错题目直接给了docker环境便于本地搭建，同时设置了权限需要执行./g...

Prynt Stealer Stub 4.5.1 We can see there are around 13 classes in the MSIL executable that consist of screen clipping keylogging stealers… Continue reading on Medium »

Something I've thought about quite often during my time in DFIR is the threat actor's perspective...what is the attacker seeing and thinking during their time in an infrastructure. As a DFIR analyst, I don't often get to 'see' the threat actor's actions, at least not fully. Rather, my early perspective was based solely on what was left behind. That's changed and expanded over the years, as we've moved from WinXP/2000/2003 to Win7 and Win10, and added some modicum of enterprise capability by deploying EDR. During the better part of my time as a responder, EDR was something deployed after an incident had been detected, but the technology we deployed at that time had a targeted "look back" capability that most current EDR technologies do not incorporate. This allowed us to quickly target the …

Networking novice here, been messing around with Wireshark and noticed that some services, including Microsoft, call out to external servers using HTTP instead of HTTPS. I'm curious what advantages HTTP offers that would make someone eschew the increased security of HTTPS. It seems to me -- admittedly as someone joining the game in the 8th inning in terms of networking's history -- that unsecured protocols should be deprecated. Is there something I'm missing? submitted by /u/DataMoreLikeShplada [link] [comments]

What would you do on your first day as the US Cyber Security Czar and a budget in the billions of dollars? submitted by /u/greyyit [link] [comments]

(crossposted with r/digitalforensics) I'm running Autopsy 4.19.3 on Win10 Enterpise VM using the Plaso ingest plugin on a 40GB .e01 image taken from a 256GB drive. I ran all the other ingest plugins I intended to use beforehand, I closed the case, shutdown Autopsy and restarted before I started the plaso ingest. The VM is on ESXi 7, it has 16 cores (the host has 32), 128mb of RAM of which currently only 15GB is in use, the host has dual Xeon E5-2690 @ 2.90GHz. The ingest was started a week ago (2022/08/01 14:54 PDT) and the progress bar is still at 0%. log2timeline has been consistently maxing three cores the entire time and the file being worked on is changing when I click on the progress bar for it's status. So it's doing something. How long is this going to eventually take? Is there anything in the case or autopsy appdata folder that would give me more information? Is it possible run a plaso ingest with more than three log2timeline processes? submitted by /u/thenebular [link] [comments]

Does anyone have a good link to where I can find more information about the databases in Snapchat? I have some snaps under the path "Snapchat Gallery/snaps/xxxxxx/xxxxxx.decrypted_media". I would like to know/confirm if the Snapchat Gallery/snaps folder contains ONLY media taken with the phone (so not snaps received). Does anyone have any experience with this? submitted by /u/agente_99 [link] [comments]

Hey everyone! I'm curious what is everyone's notetaking methodology? I'm kind of scatterbrained and i tend to leave little notes everywhere when doing a case. So i'm wondering what are everyone else's methodology/tools? I'm currently using Obsidian for notes but i know there is a better way. I've used Aurora but i feel like there is something lacking but i'm not sure what. submitted by /u/shonen787 [link] [comments]

Anyone have any recommendations as to where to find good mentors for blue teaming or DFIR? If not, can you share what made some of your mentors super valuable? Thanks! submitted by /u/tfulab23 [link] [comments]

Hi, I am wondering what side of the field I should look into. I want to specifically do criminal investigation. Thank y’all, sorry for being bothersome. submitted by /u/swatteam23 [link] [comments]

Hi all, I am going to college for CompEng, with a minor in DF&CompSec, I am wondering what tips you guys would have for learning how to utilize eDiscovery platforms to learn them, without much in the way of financial resources. (For example Encase, and other tools) If you guys have any trainings or resources I can use freely (without the CIA having to kill me lol) that would be appreciated. :) Thanks. submitted by /u/swatteam23 [link] [comments]

I’ve just started my journey into digital forensics and I’ve been finding it difficult to understand and research what the difference between Cellebrite’s “Advanced Logical” extraction and it’s “Full File System”. What are the capabilities and limitations of both types of extractions using Cellebrite? submitted by /u/holidaykid09 [link] [comments]

Can what messages people heart-emoji or cry-emoji tell us anything about public sentiment about the war? Continue reading on Medium »

Continue reading on Medium »

Article URL: https://news.sky.com/story/gchq-discovered-nationally-significant-vulnerability-in-huawei-equipment-12086688 Comments URL: https://news.ycombinator.com/item?id=32389632 Points: 13 # Comments: 0

submitted by /u/esp0x31 [link] [comments]

submitted by /u/breadchris [link] [comments]

submitted by /u/epoberezkin [link] [comments]

submitted by /u/MiguelHzBz [link] [comments]

submitted by /u/EspoJ [link] [comments]

submitted by /u/CoolerVoid [link] [comments]

We are thrilled to introduce the Grant Bounty as part of our V2 initiative to invite all players of Web3 to get involved in security. The… Continue reading on Medium »

In this CTF I developed a Nosql challenge that needs the penetration tester to Inject in many forms to find the flag. Continue reading on Medium »

Kenzy challenge (Cyber wargames 2022) Continue reading on Medium »

Solace, the decentralized insurance provider, is partnering with Hats Finance to sponsor bug bounties for Solace-insured DApps. This… Continue reading on Solace.Fi »

Hey guys, hope you all are doing well. I am Bharat Singh a Security Researcher and bug hunter from India. In this writeup I am going to… Continue reading on Medium »

What Is JWT 🤔? Continue reading on Medium »

Halo teman teman, Perkenalkan nama saya Mohammad Alfin Hidayatullah dan saya adalah seorang bug bounty hunter. Kali ini saya ingjn berbagi… Continue reading on Medium »

tl;dr: Continue reading on Medium »

Or express-validator to the rescue! Continue reading on Geromics »

SecWiki周刊（第440期) by ourren CVE-2022-21999 by SecIN社区 VirusTotal 恶意软件滥用信任总结报告 by Avenger 更多最新文章，请访问SecWiki

SecWiki周刊（第440期) by ourren CVE-2022-21999 by SecIN社区 VirusTotal 恶意软件滥用信任总结报告 by Avenger 更多最新文章，请访问SecWiki

In this CTF I developed a Nosql challenge that needs the penetration tester to Inject in many forms to find the flag. Continue reading on Medium »

* * * Konan challenge * * * Continue reading on Medium »

Kenzy challenge (Cyber wargames 2022) Continue reading on Medium »

http://home.darkok.xyz/ Was posted one year ago: give credit to the old publisher: https://www.reddit.com/user/JasonSec/ submitted by /u/Appropriate-You-6065 [link] [comments]

Top Echelon Software disclosed a bug submitted by anonymmert12: https://hackerone.com/reports/1622867

Nextcloud disclosed a bug submitted by error2001: https://hackerone.com/reports/1596673 - Bounty: $250

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

美国政府警告其紧急警报系统 (EAS) 系统中的严重漏洞；Gitlab 被发现有一项禁止使用 Microsoft Windows 的公司政策。

No content preview

GwisinLocker勒索软件系列针对具有Windows和Linux加密器的韩国医疗保健、工业和制药公司发动勒索攻击.

攻击者在一系列网络钓鱼攻击中滥用 Snapchat 和美国运通网站上的开放重定向，以期窃取受害者 Microsoft 365 凭证。

CVE-2022-21999（CVE-2022–22718）是微软2月周二补丁所爆出来的打印机本地提权漏洞。

从Mysql 任意文件读取、allowUrlInLocalInfile的使用、Mysql客户端反序列化等方面进行讲解。

英国国家卫生服务（NHS）的111紧急服务受到网络攻击,继而引发了重大影响，服务系统出现持续性中断。

推特正式确认攻击者在去年12 月使用的漏洞与他们在今年 1 月报告并修复的漏洞相同，并透露漏洞原因是去年6月的一次代码更新导致。

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/hardenedvault [link] [comments]

Summary of the espionage-related news stories for the Week 31 (31 July-6 August) of 2022. Continue reading on Medium »

Давайте попробуем проанализировать хронолигию событий, то что известно на данный момент, а потом делать выводы. Continue reading on Medium »

Cyber Detective CTF is an OSINT-focussed CTF created by the Cyber Society at Cardiff University. Continue reading on Medium »

Cyber Detective CTF is an OSINT-focussed CTF created by the Cyber Society at Cardiff University. Continue reading on Medium »

Cyber Detective CTF is an OSINT-focussed CTF created by the Cyber Society at Cardiff University. Continue reading on Medium »

Cyber Detective CTF is an OSINT-focussed CTF created by the Cyber Society at Cardiff University. Continue reading on Medium »

author — SATYAM PATHANIA Continue reading on Medium »

Hallo kembali lagi dengan saya pada kesempatan kali ini saya ingin menunjukkan dokumentasi exploitasi Getsimple CMS 3.3.10. Continue reading on Medium »

Session hijacking is defined as taking over an active TCP/IP communication session without the user’s permission. When implemented… Continue reading on Medium »

Practical XPath Injection Exploits Continue reading on Medium »

XXE (XML External Entity Injection) is a web-based security vulnerability that enables an attacker to interfere with the processing of XML… Continue reading on Medium »

Getting started with bug bounties Continue reading on Medium »

A Penetration testing report is the only tangible product. Continue reading on Medium »

Introduction: Continue reading on Medium »

Cybersecurity is the protection of Internet-connected systems such as hardware, software, and data from cyber threats. Individuals and… Continue reading on Medium »

Hello All, Continue reading on Medium »

Hello everybody! In this blog post, we will go through a Cloud Security Tool, I recently came across: Codeshield. Continue reading on Medium »

This article talks about Trivy, which is a simple and comprehensive vulnerability scanner for containers and other artifacts, suitable for Continuous Integration and Testing. Table The post Containers Vulnerability Scanner: Trivy appeared first on Hacking Articles.

This article talks about Trivy, which is a simple and comprehensive vulnerability scanner for containers and other artifacts, suitable for Continuous Integration and Testing. Table The post Containers Vulnerability Scanner: Trivy appeared first on Hacking Articles.

[link] [comments]

hey there, if you get suspicious from attacker in your computer from download some "free" software, how can i see the history of open ports and traffic to another computer from the day i downloaded the software ? submitted by /u/ArticleUseful211 [link] [comments]

Working with analysts on an Android mobile extraction. Emojis are coming up as question mark wingdings in SMS/MMS conversations. Analysts are telling me that there's no way to get that information from Android extractions, only iOS. This doesn't sound right to me. Is there advice I can give them regarding how retrieve the emoji data? submitted by /u/md9918 [link] [comments]

This is a fascinating field to work into, even from an IT perspective (not looking down upon it, it just may get repetitive for some after a while), however we don't frequently see more high-end/research oriented roles being talked about in the sub. Apart from malware analysis/reverse engineering, what are some other opportunities to work for in the digital forensics field? Or what about jobs not necessarily pertaining to OS forensics? One example I have read about would be development of tools for media forensics. One in particular is about extracting ENF from videos/audio recordings to determine the location where it was captured. Sounds cool! In case you want to read more: https://arxiv.org/pdf/1912.09428.pdf https://arxiv.org/pdf/1903.09884.pdf https://en.wikipedia.org/wiki/Electrical_network_frequency_analysis Certainly this is an already niche field among CS but are the aforementioned roles even more niche to the extent that they exist only in academic context? submitted by /u/FF6B9EAD [link] [comments]

I’m having a hard time studying RDP event IDs. Basically the entire IR part of Event IDs with different scenarios is giving me trouble. Any tips? How to best prepare for Book 2 of GCFA (Intrusion Analysis) submitted by /u/bigpoppaash [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

浅谈开源软件供应链风险 by ourren XSS in Gmail's Amp4Email by ourren [HTB] Europa Writeup by 0x584a 更多最新文章，请访问SecWiki

浅谈开源软件供应链风险 by ourren XSS in Gmail's Amp4Email by ourren [HTB] Europa Writeup by 0x584a 更多最新文章，请访问SecWiki

Hello everyone, I'm a User Experience Designer in a large security company that's currently building a product around identity security, including Active Directory and Azure AD. As I conduct my research, I try to determine how many domains an organization usually has (in varying scales, of course). How are they managed? Is there a team that manages specific domains across all forests? Does one team usually take care of all the domains and not care about the others? The purpose of this question is to understand if the user needs the option to toggle between domains rather than simply filtering data by "Domain Name". If you have any other comments regarding how you manage your domain security in your organization, it would be appreciated. Thank you very much! submitted by /u/RaspberryFair8362 [link] [comments]

“Fuzz testing is a novel way to discover security vulnerabilities or bugs in software applications.” The concept of fuzzing was introduced… Continue reading on Better Programming »

“Fuzz testing is a novel way to discover security vulnerabilities or bugs in software applications.” The concept of fuzzing was introduced… Continue reading on Better Programming »

I found a link to someone's library on the internet. https://cdn.preterhuman.net/texts/ submitted by /u/ConstProgrammer [link] [comments]

submitted by /u/EGirlCollector [link] [comments]

Continue reading on Medium »

RATELIMITED disclosed a bug submitted by codeslayer137: https://hackerone.com/reports/545136

Omise disclosed a bug submitted by codeslayer137: https://hackerone.com/reports/1546726 - Bounty: $100

Have been waiting for school to end for some time now to finally get back to exploit development. Finally got around to making my first exploit development writeup and wanted to share with the community. Looking forward to many more! https://secnate.github.io/ctf/phoenix/phoenix-stack-zero/?fbclid=IwAR1-XbyPP9rSrLArmTPqXNb1Tkfj_7E8_Qi3XFvaexEyZJPcuA1J_YeYkj8 Of course, any comments/feedback would be greatly appreciated! submitted by /u/ProgrammingBro123 [link] [comments]

You just landed in an internal network. You scan the network and there’s only the Domain Controller… Continue reading on InfoSec Write-ups »

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks… Continue reading on Medium »

In this article, I’m going to document about the process to perform web application reconnaissance. Before reading this article, we must… Continue reading on Medium »

A very common and critical vulnerability in PHP applications is PHP Object Injection. This blog post explains how they work and how they… Continue reading on Medium »

This vulnerability is caused by unsafe use of the reflection mechanisms in programming languages like Java or C# Continue reading on Medium »

This script is possibly vulnerable to file inclusion attacks. Continue reading on Medium »

Code Injection is the general term for attack types which consist of injecting code that is then interpreted/executed by the application… Continue reading on Medium »

Unrestricted File Upload — File Extension Filter Bypass Continue reading on Medium »

Directory traversal (also known as file path traversal) is a web security vulnerability that allows an attacker to read arbitrary files on… Continue reading on Medium »

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some… Continue reading on Medium »

I'm using regshot to compare two registry snapshots against each other. Is there a standard for how to navigate around the potentially hundreds of registry changes that all look at the same to a beginner? submitted by /u/Jaruki_Jurakami [link] [comments]

Hey there. I'm interested in learning Wireshark in my off-time from work, and I am trying to increase my time off screen, as I'm sure many of you stare at computers all day for work like me. So I'm looking for a physical book on Wireshark and packet analysis. There are a handful of well-reputed options on Amazon, but the budget's tight. Anyone read and would recommend any particular one of the well-known Wireshark books, like Wireshark 101 or Practical Packet Analysis? The reviews are all positive so it's tough to make a choice here. Many thanks. submitted by /u/DataMoreLikeShplada [link] [comments]

Question says it all I'm currently going through my CCNP ENCOR, and covering IPSec in the Overlay Tunnels chapter IPSec typically has 2 modes: transport and tunnel Tunnel mode encrypts the ENTIRE packet, but requires dedicated endpoints - something that normies aren't going to have Transport mode encrypts only the payload (i.e. personal data), but keeps all the original header information (ports and IP addresses) However, HTTPS already encrypts the payload of network traffic. And a huge chunk of traffic hitting the internet (not just web traffic) is HTTP-based So would that not mean that - from a security perspective - personal (aka Transport) VPNs are basically useless? I understand the benefit of circumventing region locking for purposes of watching normally off-limits content (i.e. Netflix), but my question here is solely based on the security perspective Many thanks for any input submitted by /u/lfionxkshine [link] [comments]

submitted by /u/jaco_za [link] [comments]

submitted by /u/krystalgamer [link] [comments]

submitted by /u/Gallus [link] [comments]

Hyperledger disclosed a bug submitted by freskimo: https://hackerone.com/reports/801370 - Bounty: $200

Hyperledger disclosed a bug submitted by mttrbrts: https://hackerone.com/reports/506412 - Bounty: $500

Hyperledger disclosed a bug submitted by xiaoc: https://hackerone.com/reports/411364 - Bounty: $1500

MTN Group disclosed a bug submitted by alimanshester: https://hackerone.com/reports/1264834

Kubernetes disclosed a bug submitted by gaffy: https://hackerone.com/reports/1382919 - Bounty: $2500

Kaggle知识点：时序预测基础知识 by ourren 安全控制有效性验证的发展趋势浅论 by ourren [HTB] Haircut Writeup by 0x584a 更多最新文章，请访问SecWiki

Kaggle知识点：时序预测基础知识 by ourren 安全控制有效性验证的发展趋势浅论 by ourren [HTB] Haircut Writeup by 0x584a 更多最新文章，请访问SecWiki

We have been trying to find someone online, specifically perhaps by using an email address, or username. Here the use of OSINT comes. Continue reading on Medium »

No content preview

No content preview

No content preview

Gaining unprivileged access to Reddit moderator logs Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Gaining unprivileged access to Reddit moderator logs Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Gaining unprivileged access to Reddit moderator logs Continue reading on InfoSec Write-ups »

I want to start learning exploit dev, if you guys can help me with it or drop in your favorite resource that helped you get where you are, it would be great! If someone has time and would like to answer a few questions, it would help me a lot too. submitted by /u/National_Concern2361 [link] [comments]

Article URL: https://github.com/knownsec/pocsuite3 Comments URL: https://news.ycombinator.com/item?id=32365622 Points: 1 # Comments: 0

覆盖了目前网络资讯上公布的30+种常见的未授权访问漏洞

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

TL; DR Try to answer several quick questions with a long post: On creating a pod in Kubernetes, if somaxconn is not specified, what the default value will be, and who will set it? If changing node’s sysctl settings, will they be propagated to pods? Are all sysctl parameters are equal in terms of initialization and propagation? TL; DR 1 Background 1.1 Journey of components when creating a pod 1.2 sysctls in container and unsafe sysctls in k8s 1.3 The net.core.somaxconn parameter of pods/containers 1.4 Problem statement 2 Dig inside 2.1 kube-apiserver -> kubelet 2.2 kubelet -> dockerd 2.3 Skip k8s/kubelet/cni: create container right from docker 2.4 Skip docker: create container right from containerd Find the right containerd.sock file Pull image Create a container Check the …

Whenever we’ll get a reverse shell, it’s mostly is spawned by creating a new separate process, if that process gets killed, could be… Continue reading on Medium »

completely automate SQLI-Injection detector hacking tool Continue reading on Medium »

This story is a tale from my job around being able to fully compromise a server whilst only having my phone accessible to me. Continue reading on Medium »

Hello Everyone, This is Rajiv Gyawali from Butwal, Nepal. This is a story of one of my finding on facebook. Continue reading on Medium »

Introduction to SQL Limit Order By The limit clause in Mysql is used to restrict the number of the rows retrieved in the resultset of the… Continue reading on Medium »

This challenge is from the Web Security Academy by Portswigger. It is under the category “OS command injection”. After starting the lab… Continue reading on Medium »

Continue reading on Medium »

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking… Continue reading on Medium »

What Is Error-Based SQL Injection? Continue reading on Medium »

SQL Injection vulnerabilities are often detected by analyzing error messages received from the database, but sometimes we cannot exploit… Continue reading on Medium »

Blind SQL injection is a type of SQL injection attack where the attacker indirectly discovers information by analyzing server reactions to… Continue reading on Medium »

Hyperledger disclosed a bug submitted by bhaskar_ram: https://hackerone.com/reports/1635321 - Bounty: $200

Unless otherwise noted, changes described below apply to the newest Chrome beta channel release for Android, Chrome OS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 105 is beta as of DATE. You can download the latest on Google.com for desktop or on Google Play Store on Android. Custom Highlight API The Custom Highlight API extends the concept of highlighting pseudo-elements by providing a way to style the text of arbitrary ranges, rather than being limited to the user agent-defined ::selection, ::inactive-selection, ::spelling-error, and ::grammar-error. This is useful in a variety of scenarios, including editing frameworks that wish to implement their own selection, find-in-page over virtuali…

Passwordless is a form of authentication that doesn't require users to provide passwords during login. That much you could glimpse from the name, but how does it work? What are its trade-offs? This blog post will do its best to explain to you how passwordless can be implemented using modern technologies such as Web Authentication (WebAuthn), while at the same time providing better user experience and security than the traditional password-based approach. submitted by /u/Blakebvhjjdd [link] [comments]

submitted by /u/entropydaemon8 [link] [comments]

submitted by /u/sciencestudent99 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/awarau888 [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/crower [link] [comments]

submitted by /u/sanitybit [link] [comments]

Before I start this I want to preface that I am genuinely curious and not trying to start a argument over programming languages and what not but why do you all want do exploit development? As far as I understand it (which is possibly incorrect) developing exploits are starting to become a thing of the past with much more "safe" languages and mitigations being implemented and software becoming much more safe. Now this may be a scathing hot take but is there a bit of truth to it? I like the idea of Exploit Dev and I would love to know what you guys opinions/why you do what you do. I want to get into Exploit Dev but I don't think as a career but as a cool hobby that would be cool to talk about. ​ Thanks for reading submitted by /u/Synosis1 [link] [comments]

Article URL: https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/ Comments URL: https://news.ycombinator.com/item?id=32359814 Points: 4 # Comments: 0

Article URL: https://docs.ssh-mitm.at/CVE-2022-29154.html Comments URL: https://news.ycombinator.com/item?id=32353570 Points: 2 # Comments: 0

Article URL: https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/ Comments URL: https://news.ycombinator.com/item?id=32359814 Points: 4 # Comments: 0

Article URL: https://portswigger.net/daily-swig/high-impact-vulnerability-in-draytek-routers-leaves-thousands-of-smes-open-to-exploitation Comments URL: https://news.ycombinator.com/item?id=32356636 Points: 1 # Comments: 0

Just received this in my inbox: We are writing to let you know about a bug we recently discovered and fixed in Slack's Shared Invite Link functionality. This feature allows you to create a link that will permit anyone to join your Slack workspace; it is an alternative to inviting people one-by-one via email to become workspace members. You are receiving this email because you created and/or revoked one of these links for your workspace between April 17, 2017 and July 17, 2022. We'll go into detail about this security issue below. Important things first, though: We have no reason to believe that anyone was able to obtain your plaintext password because of this vulnerability. However, for the sake of caution, we have reset your Slack password. You will need to set a new Slack password before…

Day 163: The Kharkiv direction is another difficult point for the Russian Federation Continue reading on Medium »

Chatting with OhShINT Continue reading on Medium »

攻防演练第四年的一些碎碎念 by ourren MSF多层内网渗透全过程 by ourren 数据传输安全白皮书 by ourren 美国关键基础设施网络防御路线发展与调整 by ourren 更多最新文章，请访问SecWiki

攻防演练第四年的一些碎碎念 by ourren MSF多层内网渗透全过程 by ourren 数据传输安全白皮书 by ourren 美国关键基础设施网络防御路线发展与调整 by ourren 更多最新文章，请访问SecWiki

Or is it something else entirely? [Paraphrasing here] I received a panicked call from a friend the other day. Intending to go to fivethirtyeight.com, she'd instead typed in .org. This took her to a page (safety-search dot com) that was prompting her to download their "yahoo team developed" browser plugin to help her with safe searches. She didn't click on anything and, when she got back to her screen with phone in hand, her browser had gone to fivethirtyeight.com. There were no malware protection software notifications of any kind anywhere in the process. Did something already happen by then, even if she didn't click on anything? What's the best way to look at this type of incident to figure out what might or might not have happened? submitted by /u/arnach [link] [comments]

https://cybergeeks.tech/how-to-analyze-linux-malware-a-case-study-of-symbiote/ submitted by /u/CyberMasterV [link] [comments]

Good morning /r/computerforensics I've got a hypothetical scenario I'd like to run by you - I've got a Ubuntu VM. Suppose I create a partition, write files to that partition, and then delete the partition. How would I image the VM to obtain the disk slack that contained that partition? Do VMs even contain disk slack? How about if I have partition sda, sdb, and sdc, aside from the naming convention, if I deleted sdb, any tips on identifying that there was once sdb (using a tool like sleuthkit)? Thank you for your time and mental cycles :) submitted by /u/DeadBirdRugby [link] [comments]

Hello everyone! I've to create a forensics image from a dedicated server hosted on OVH. Any suggest? submitted by /u/Zipper_Ita [link] [comments]

APT32海莲花组织作为有国家背景支持的顶尖黑客团伙。

在阿里巴巴2022 Q2财报电话会议上，高管们谈到了“互联网行业减速”，这阻碍了阿里云的增长。

勒索病毒，是一种新型电脑病毒，主要以邮件、程序木马、网页挂马的形式进行传播。该病毒性质恶劣、危害极大，一旦感染将给用户带来无法估量的损失。

近年来，柬埔寨非常重视数字经济发展，颁布了《电子商务法》，并将外国电商企业纳入简化增值税登记机制。

研究人员发现了一种新型物联网（IoT）僵尸网络“RapperBot”，自2022年6月中旬以来就一直处于活动状态。

澳大利亚隐私监管机构正调查 TikTok，TikTok 称报告存在多处错误，并“存在对移动应用根本性的误解”。

近期，NFT 市场 OpenSea 宣布推出全新 Web3 市场协议 Seaport 协议，用于安全高效地买卖 NFT。本文将深度分析其关键业务实现和接口实现。

本篇文章原文在我的个人公众号（ZAC安全）中，部分有争议的内容已修改。

8月3日，印度电子和信息技术国务部长Rajeev Chandrasekhar宣布，于2019年颁布的《数据保护法案》已正式撤回。

网络安全公司Akamai发布了最新的报告。

研究人员发现一个严重的远程代码执行漏洞，会对29种型号的DrayTek Vigor商业路由器产生严重影响。

网络攻击组织盯上了 DIHK，对其发起了大规模的网络攻击。DIHK无力面对如此强力的网络攻击，直接躺平。

攻击者从区块链平台Solana窃取了超过500万美元，具体的失窃原因仍在进一步调查中调查中。

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/macropng [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/ly4k_ [link] [comments]

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/Diego-AltF4 [link] [comments]

submitted by /u/wez32 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/last0x00 [link] [comments]

submitted by /u/Gallus [link] [comments]

How’s it going guys! My name is Sagar Sajeev and this is my writeup about one of my recent SSTI (Server Side Template Injection) finding. Continue reading on Medium »

I have found a way to find internal ip for big organization(for example twitter, linkedin etc).The way to do that is very simple. Continue reading on Medium »

Authors: James Cha, Vickie Li, Shashank Mirji, and Frank Filho Continue reading on tech-at-instacart »

When performing a penetration test of an application, tests against the authentication mechanism are always an important check. While a… Continue reading on Medium »

In this article, we will learn about DBMS Injection. Continue reading on Medium »

SQL injections are one of the most utilized web attack vectors used with the goal of retrieving sensitive data from organizations. Continue reading on Medium »

SQL injection is a code injection technique used to hack websites, attack data applications, destroy databases by inserting malicious SQL… Continue reading on Medium »

Signaling System 7 (SS7) is an architecture for performing out-of-band signaling in support of the call-establishment, billing, routing… Continue reading on Medium »

Footprinting is an ethical hacking technique used to gather as much data as possible about a specific targeted computer system, an… Continue reading on Medium »

I defend Lakoff’s idea that propaganda is about how one frames an issue by looking at media coverage of the Russian invasion of Ukraine. Continue reading on Medium »

Hiillo Folks! I hope you liked my OSINT series. In this blog, we will discuss some professionals and undercover techniques to track anyone… Continue reading on Medium »

Day 162: Mykolaiv will not be forcibly evacuated Continue reading on Medium »

Well.. let's start this story back at the beginning! I am not a hacker but Angelina Jolie circa ’95 was my first love and I have seen the… Continue reading on Medium »

Reddit disclosed a bug submitted by high_ping_ninja: https://hackerone.com/reports/1658418 - Bounty: $5000

Automattic disclosed a bug submitted by ghimire_veshraj: https://hackerone.com/reports/1590237 - Bounty: $350

Automattic disclosed a bug submitted by ghimire_veshraj: https://hackerone.com/reports/1592596 - Bounty: $100

TikTok disclosed a bug submitted by mrzheev: https://hackerone.com/reports/1577370 - Bounty: $250

Has anyone encountered Deep Freeze, and know if there's a way around its "reboot to restore" ability? submitted by /u/greyyit [link] [comments]

No content preview

No content preview

No content preview

Exploring Frans Rosén’s bypass of OAuth security Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Exploring Frans Rosén’s bypass of OAuth security Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Exploring Frans Rosén’s bypass of OAuth security Continue reading on InfoSec Write-ups »

I know that each company has different procedures and practices, but as a student to cybersecurity, I'm struggling to understand why some large companies struggle to patch vulnerabilities while others can with ease. To illustrate this example, We'll look at CVE-2022-0778 (Publicized March 15th, 2022). An OpenSSL vulnerability that was in a bug on the BN_mod_sqrt() function, if served as a maliciously crafted cert to parse, it would enter an infinite loop. The vulnerability then impacts a bunch of different scenarios such as Denial of Service, TLS servers consuming client certs, TLS servers consuming client certs, taking private keys from customers, etc. Looking through the vulnerability reports and responses, I saw that each cybersec company responded to the vulnerability differently. Some were able to patch it fast, while others still haven't come up with a fix For instance, PAN deployed a patch 39 days after the publication, Check Point deployed one in 2-3 days, but companies like Fortinet + Cisco still haven't announced a patch yet. My main question is if it's considered "High Severity", then why would some companies still not have it patched? Thanks. submitted by /u/Beginning_Actuary_54 [link] [comments]

I am attempting to install AlienVault OSSIM on a new server but I can not get past this error. I can not find this bin file online. Would anyone be able to link to to a place that I can download this firmware file? submitted by /u/SOSicearrow [link] [comments]

How is malware that was delivered to you via the browser able to exploit things like the OS or other software on the computer? In other words, how does malware "travel" outside of the browser to exploit other things on the computer? submitted by /u/Jaruki_Jurakami [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Explosion is a boot2root machine on HackTheBox. It has “Very Easy” difficulty and is part of Tier 0 starting point challenges. Continue reading on Medium »

The Litmus Test of your Cybersecurity also helps to achieve a continuous Cybersecurity posture.  Redops and Cart  Vulnerability Management… Continue reading on Medium »

深入学习 JNDI 注入的漏洞原理以及背后逻辑。

据科技媒体TechCrunch报道，若干名未知攻击者“抄底”了上万个加密钱包，钱包内有价值上亿美元的代币。

澳大利亚隐私监管机构 表态，正在遵循监管行动政策，核查一份报告中指出的 TikTok 数据隐私问题。

澳大利亚隐私监管机构 表态，正在遵循监管行动政策，核查一份报告中指出的 TikTok 数据隐私问题。

Atlassian发布7月的安全更新，涉及到Confluence Server的多个漏洞，其中CVE-2022-26138为一个硬编码漏洞。

虽然“GitHub 3.5万个代码库被攻击”是一个乌龙事件，但是有软件工程师发现，大约有数千个GitHub代码库正在被恶意复制。

知名去中心化钱包和加密货币交换门户网站Atomic wallet近期被假冒。

来自ThreatLabz的安全研究人员发现了一批大规模的网络钓鱼活动。

目前，思科已经发布了软件更新来解决这两个漏洞。

微软已在本周推出两项新服务，让企业安全运营中心 (SOC) 更广泛地访问其每天收集的大量威胁情报。

有一年初，急需扩充后台Linux C\C++研发团队，需在2个月内招聘到20人。在薪资不属于一流的情况下如何保证质量？

https://booksdl.org/comics0/ submitted by /u/Forward_Hold5696 [link] [comments]

作者： Julio Dantas, James Haughom, Julien Reisdorffer 译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/blog/living-off-windows-defender-lockbit-ransomware-sideloads-cobalt-strike-through-microsoft-s...

作者： Julio Dantas, James Haughom, Julien Reisdorffer 译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/blog/living-off-windows-defender-lockbit-ransomware-sideloads-cobalt-strike-through-microsoft-s...

I am not sure if this is the correct sub, if not, maybe some one can help direct me to the correct one. Basically some of my personal information was stolen and posted online. I used a fake tracking link to capture the IP and other user information of the person that was posting my information online. My main question is, is there any way that the IP could track back to a different state then where the person is actually located? Like if they bought their phone in one state and then moved, could it possibly still show the old state? submitted by /u/HumanUnidentified [link] [comments]

submitted by /u/lukahacksstuff [link] [comments]

submitted by /u/Hefty_Knowledge_7449 [link] [comments]

submitted by /u/jwizq [link] [comments]

submitted by /u/gid0rah [link] [comments]

submitted by /u/_m-1-k-3_ [link] [comments]

Hi all, As you guys know I am going into digital forensics (specifically eDiscovery). My question for the day is, what programming language(s) do you guys suggest that I learn? Thank You. submitted by /u/swatteam23 [link] [comments]

The latest version of "TCU Live" (2022AUG01) has been released. It's running the latest Debian sid packages, Linux 5.18 kernel, and third party packages such as the Tor Browser, checkra1n, volatility, guestmount, git, etc. See the README in the link for more information: https://drive.google.com/drive/folders/0B8zx3qPcj9rJVjJrcnB4aXl1VG8?resourcekey=0-gjI_o4MHtiCvsjet9TCygw&usp=sharing It's built to be fairly lean and extensible and is great for in-house forensics, OSINT, field work, or if you just need to quickly spin up a Linux box. If you are looking for something that'll boot on almost all x86-64 (AMD64) hardware give it a shot and DM me if you have any comments or issues. submitted by /u/atdt0 [link] [comments]

A very large ISP had previously associated a number of their IP addresses to our company. What I mean by this is that a WHOIS/ARIN lookup for the IP has our company name referenced in it. These IP addresses are no longer in use by our company as confirmed by the ISP. The ISP is blaming DNS and telling us that it could take years for our company name to be disassociated with the IP. Why do I care? The IP addresses are negatively impacting our public footprint score utilized by regulatory agencies. Who can disassociate our company name from these IP addresses? Can't the owner of the IPs make this change since they own the IP addresses? What do I need to tell them to do? submitted by /u/mtx4gk [link] [comments]

Hi, I need some assistance with Alienvault OTX alarms that I've received recently. Commands are being ran on user's machines with their usernames (wouldn't this be "ran" as something else if it was an automated process?).They all have to do with:C:\Windows\System32\rundll32.exeC:\Windows\System32\svchost.exe ​ I will comment and condense the alarms down. The users whose machines it is occurring on are not computer fluent people and don't know what a command line is. I also can't find any info for the switches of the command line ( -k, -s, ). I'm having trouble figuring out if these are false positives. ​ NOTE: MD-5 hashes confirm as Microsoft on Virustotal submitted by /u/compguyguy [link] [comments]

Just curious what are the places willing to pay for Linux Kernel bugs and LPE exploits outside Google's kctf, ZDI's pwn2own, and zerodium? submitted by /u/AggravatingTell547 [link] [comments]

Hello, In the global pillar on my manager node (/opt/so/saltstack/local/pillar/global.sls), I already specified my BPF to exclude the monitoring of whitelisted IP addresses as follows: nids: bpf: - not host 192.168.1.2 && - not host 192.168.1.3 && - not host 192.168.1.4 However, the alerts still triggered from the above IP addresses. I think that the AND operators should be replaced by OR? Any advice would be highly appreciated. Thank you. submitted by /u/sanba06c [link] [comments]

We provide a case study of how the criminal group Projector Libra uses legitimate file sharing services to distribute Bumblebee malware. The post Flight of the Bumblebee: Email Lures and File Sharing Services Lead to Malware appeared first on Unit 42.

Day 161: HIMARS in action — the Russian Federation failed to destroy any of the systems delivered to Ukraine Continue reading on Medium »

Olá, espero que você esteja bem e caçando! Continue reading on Medium »

dnsReaper — subdomain takeover tool for attackers, bug bounty hunters and the blue team! Continue reading on Medium »

Hello guys, I’m Abhishek, today I'm with a new topic. Yes, you heard it right that You need these certifications in 2022 right now. Every… Continue reading on Medium »

Here’s the list of Websites to look upon. Continue reading on Medium »

COMPLETE BEGINEER’S GUIDE IN 7 STEPS… Continue reading on Medium »

Assalamu Alaikum peace be upon you Continue reading on Medium »

Hello guys, I’m back with another exciting topic. We all need guidance in bug hunting, through our mentors, professional bug hunters, and… Continue reading on Medium »

Hi fellow hackers and friends, This is Aravind here with another awesome article on how an IDOR bug helped me to access all user data of a… Continue reading on Medium »

Hello folks, Continue reading on Medium »

In this tutorial, Im just wanna talk about open redirect vulnerability and explain how hacker do information gathering to find that… Continue reading on Medium »

Olá, espero que você esteja bem e caçando! Continue reading on Medium »

dnsReaper — subdomain takeover tool for attackers, bug bounty hunters and the blue team! Continue reading on Medium »

ACTIVE DIRECTORY ROOM FROM TRY HACK ME Continue reading on System Weakness »

ACTIVE DIRECTORY ROOM FROM TRY HACK ME Continue reading on Medium »

Redeemer is a boot2root machine on HackTheBox. It has “Very Easy” difficulty and is part of Tier 0 starting point challenges. Continue reading on Medium »

During some testing on my Windows VPS, I was checking out the OpenSSH server feature in Windows. This reminded me about the times our Red… Continue reading on Medium »

Using Caldera to test your EDR Agent Continue reading on Medium »

2022 上半年区块链安全及反洗钱分析报告 by ourren 从0-1搭建企业级数据治理体系 by ourren 国际网络攻击溯源机制的必要性和可行性探析 by ourren 云计算安全的新阶段：云上风险发现与治理 by ourren 浅析Vmess流量与强网杯2022谍影重重 by ourren 更多最新文章，请访问SecWiki

2022 上半年区块链安全及反洗钱分析报告 by ourren 从0-1搭建企业级数据治理体系 by ourren 国际网络攻击溯源机制的必要性和可行性探析 by ourren 云计算安全的新阶段：云上风险发现与治理 by ourren 浅析Vmess流量与强网杯2022谍影重重 by ourren 更多最新文章，请访问SecWiki

Reddit disclosed a bug submitted by keer0k: https://hackerone.com/reports/862882

No content preview

Hello Security Researchers Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Hello Security Researchers Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Hello Security Researchers Continue reading on InfoSec Write-ups »

No content preview

No content preview

德国电力电子制造商赛米控披露，它遭到勒索软件攻击，甚至加密了公司的网络。

恶意软件设计和部署的关键之处，在于将自己伪装成合法的APP，欺骗用户用户下载和运行恶意文件，以此感染目标设备和系统。

德国半导体制造商Semikron披露，该公司遭到勒索软件攻击，加密了公司的部分网络。

submitted by /u/dmchell [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/ScottContini [link] [comments]

submitted by /u/Background-Degree-50 [link] [comments]

Article URL: https://haydock.substack.com/p/security-release-criteria Comments URL: https://news.ycombinator.com/item?id=32324806 Points: 3 # Comments: 0

Article URL: https://www.pluginvulnerabilities.com/2022/08/02/hacker-probably-targeting-this-authenticated-option-update-vulnerability-in-makes-wordpress-plugin/ Comments URL: https://news.ycombinator.com/item?id=32322219 Points: 1 # Comments: 0

Article URL: https://www.openwall.com/lists/oss-security/2022/08/02/1 Comments URL: https://news.ycombinator.com/item?id=32318155 Points: 128 # Comments: 36

Olá sou o SNISS e hoje vou falar sobre uma vulnerabilidade muito encontrada recentemente chamada de Envenenamento de web Cache Continue reading on Medium »

Dear community. Continue reading on Medium »

Stealing Session Information From IndexedDB Continue reading on Medium »

Note:- It's just a bug report to the Paytm and BangaloreTrafficPolice, KarnatakaOne websites, with 5-star severity, hope they fix nothing… Continue reading on Medium »

Introduction Continue reading on Medium »

Na segunda-feira, 27 de junho de 2022, Moonriver e Moonbeam receberam uma atualização urgente por meio do runtime 1606 para resolver um… Continue reading on Medium »

Hi, today I‘m going to talk about three basic vulnerabilities that I discovered in the same program and were rewarded with 1500€. Continue reading on InfoSec Write-ups »

This is the write-up of one of the first vulnerabilities that I found 3 years ago. It’s a little late, but better late than never, right? Continue reading on Medium »

KLEX is an implementation of the Balancer v2 Protocol on Klaytn. Continue reading on Medium »

Begginer friendly OSINT room to sharp your skills Continue reading on Medium »

Explore different OSINT tools used to conduct security threat assessments and investigations. Continue reading on Medium »

Day 160: An important moment for the Ukrainian counteroffensive Continue reading on Medium »

In the US and the UK, OSINT is legal, but security teams need to stay within a clearly defined framework, which is agreed with their… Continue reading on Medium »

Sorry if this sounds like a noob question. ​ When it comes to Kernel Debugging, HackSys Team's HEVD seems to be the go-to for practice. In write-ups, we see that we need to set up 2 VMs and set up baud rate, etc. Essentially, trying to replicate the hard-wired debugging across machines with Ethernet cables that was performed before VMs came along. The baud rate is matched between windbg running on both VMs and a Pipe is set up between both VMs. ​ Can this be done between different processor architectures? Ex: I have Win10 VM on a x86_64 arch machine (Debuggee) and another Win10 VM on MacBook Pro (Debugger). Since MacBook uses ARM arch, the debugger will obviously show ARM instructions (if I were to debug an application that's already on MacBook). Now, is there a way I can debug the x86_64 programs on Debuggee VM from my ARM VM? ​ If I'm not making sense, let me know. I'm pretty new to this and I'm trying to learn. submitted by /u/ScrotumHair [link] [comments]

I’m new to the DFIR field, and I’m wondering what some of you, that have been in the field for years, would do if you could go back in time? What are some things to think about or consider as you go forward in your career? I’m young and inexperienced, so it’d be cool to hear about any tips, or advice you might have for a new comer in this field submitted by /u/tfulab23 [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Reddit disclosed a bug submitted by fransrosen: https://hackerone.com/reports/1567186 - Bounty: $10000

GitLab disclosed a bug submitted by m-narayanan: https://hackerone.com/reports/1637577

CIS大会夏日版，FreeBuf邀请多位业界大咖，就零信任安全进行了深入的探讨、展望，期待能够给企业和用户带来一些零信任安全方面的参考和启发。

540 万 Twitter 用户的数据在暗网上出售的消息可能会让许多人感到震惊，但这可能只是冰山一角。

对于甲方企业来说，全面实施零信任的核心推动是什么，零信任技术未来的发展路径又是怎样的呢？

运气成分90%，技术含量10%的一次记录。

ALPHV勒索软件团伙，又名BlackCat，宣布对Creos卢森堡公司的网络攻击事件负责。

网络安全研究人员发现一组异常的移动应用程序，这些应用程序向民众公开了 Twitter API 密钥。

在线平台Zscaler安全专家发布了对Raccoon Stealer恶意软件新变种的分析。

书签可以被滥用来从企业环境中吸走大量被盗数据，或者在几乎不会被发现的情况下从中部署攻击工具和恶意有效载荷。

Raccoon 是一个信息窃密恶意软件，能够从浏览器窃取例如密码、Cookie 和自动填充数据等隐私信息。

No content preview

No content preview

Testing for CSRF can be worth it. Continue reading on InfoSec Write-ups »

No content preview

No content preview

Testing for CSRF can be worth it. Continue reading on InfoSec Write-ups »

No content preview

No content preview

Testing for CSRF can be worth it. Continue reading on InfoSec Write-ups »

Hi peeps, I'm a SOC analyst and I was wondering if there's a software to visualize threats and incidents. I wanna create something like a timeline and such. I know I could just use visio or any other software like it but I was wondering if there's something specific for InfoSec. Thanks ;) submitted by /u/MenaHabib_ [link] [comments]

Dancing is a boot2root machine on HackTheBox. It is “Very Easy” difficulty and is part of Tier 0 starting point challenges. Continue reading on Medium »

submitted by /u/DarkGrejuva [link] [comments]

Dunno about speeds or even its been posted before... http://88.99.99.152/ submitted by /u/DodgyguyNZL [link] [comments]

I am using fake names in this story. The story is that there was this person that Zachery was talking to on a dating site. He was sadly… Continue reading on Medium »

Day 159: The food deal seems to have worked Continue reading on Medium »

TryHackMe’s WebOSINT room, finding information that no longer exists. Continue reading on Medium »

###########brougth to you by the guy who knows little bit about linux =what is wget? : it is a GNU computer program that retrieves content from web servers (long story short free software terminal programm that can batch download websites and what people post on this sub.) ​ =why do i need it? : sometimes its annoying to click thousands of links to download files instead of just using a free software solution that will crawl and download everything for you. ===how do i install wget? =windows : windows now has a builtin package manager(thanks linux) winget install GnuWin32.Wget or install choco package manager then do this choco install wget =linux:easy mode sudo pacman -S wget sudo dnf install wget sudo apt install wget (i think you dont need to do this since it maybe a…

submitted by /u/Plastic_Preparation1 [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

Hello Everyone, I'm using Caine 12.4 for image acquisition because it defaults to read only and, well I like it. Everything except for the fact that the region settings are set to Italian by default. It's a small thing, but I'd, at minimum, like to see the dates in English and prefer if the region was set to Canada, and the time zone to mountain time (Whitehorse, Yukon). I can do this manually after booting, but I've found the only way to get it to work properly is to set the time zone to mountain, set the region to Canada, and delete Italian from the language list (Without deleting the language the dates still display in Italian). So I'm wondering what I would need to edit in the iso to switch the region and timezone defaults, or at the very least remove Italian from the installed languages. If anyone can help me out with this it would be greatly appreciated. submitted by /u/thenebular [link] [comments]

Hello all, please delete if not allowed. I have an interview and skills test at the end of the month for an analyst position with an ICAC unit for a law enforcement agency. I am fresh out of college and although I did take some digital forensic courses, the majority of my course work had a heavy emphasis on physical evidence. The job duties of the position are primarily to conduct research and preform field previews when necessary. I have no information on what the skills test will contain. What would you recommend I try to study before taking the test? This is an entry level position, so the test will likely not contain much materiel on complex techniques. Any help would be greatly appreciated. submitted by /u/No-Librarian4750 [link] [comments]

Good morning, It’s time for a new 13Cubed episode! This one covers a tool that I truly believe is revolutionary. Imagine being able to "mount" memory as if it were a disk image. With a single command, MemProcFS will create a virtual file system representing the processes, file handles, registry, $MFT, and more. The tool can be executed against a memory dump, or run against memory on a live system. This is a game changer for memory forensics! Episode: https://www.youtube.com/watch?v=hjWVUrf7Obk Episode Guide: https://www.13cubed.com/episodes/ 13Cubed YouTube Channel: https://www.youtube.com/13cubed 13Cubed Patreon (Help support the channel and get early access to content and other perks!): https://www.patreon.com/13cubed submitted by /u/13Cubed [link] [comments]

SSTImap was developed as a new SSTI detection tool based on Tplmap. The main feature of this tool and a key difference with Tplmap is the interactive mode, which enhances detection and exploitation. Also, payload for Smarty was changed to work without {{php}}{{/php}} tag, which was disabled by default in Smarty 3.0. New payloads for other template engines will be developed. https://github.com/vladko312/SSTImap submitted by /u/vladko312 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/vladko312 [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

InsecureShop is an Android application written in Kotlin that is designed to be intentionally vulnerable. It is a great asset for… Continue reading on Medium »

Today I will explain How I get Full Account Takeover via stealing the action of the login form when you have XSS on the login page. Continue reading on Medium »

Selam arkadaşlar bugün Command Injection zafiyetinden bahsedip, Portswigger’da bulunan soruların çözümlerinden anlatacağım. Continue reading on Medium »

July went by so fast! While we have so much to share, be sure to believe that we have much more planned for the next couple months. If you… Continue reading on Medium »

Namaste everyone, Welcome to our ‘PTN’ infosec monthly #2 and we are back with the second newsletter with PTN Anniversary special updates… Continue reading on Pentester Nepal »

you know that I mostly earn bounties in Cryptocurrencies and this leads to the answer → I mostly hunt on XXXXXXXXXXXX Continue reading on InfoSec Write-ups »

Don’t forget to check for user access rights Continue reading on InfoSec Write-ups »

Responder Starting Point is a very good Challenge by HackTheBox. In this article we are going exploit it. Continue reading on Medium »

I. Overview Continue reading on Medium »

Here are some of the amazing interview questions that we came across and wanted to share with you. Continue reading on Medium »

Based on the overall X stock forecast of $32.62 per share (derived from P/E & EPS, and comparable valuations), and the current price of X… Continue reading on Medium »

Article URL: https://faradaysec.com/community-v4/ Comments URL: https://news.ycombinator.com/item?id=32309146 Points: 4 # Comments: 2

Been using LastPass for years. I've been happy until my Windows 10 work laptop had an issue. The LastPass browser plugin sucks up 100% CPU. Never had this issue before. Switched to Bitwarden with no issues. Questions Has anyone else seen this issue? Which password manager would you recommend? Any issues with Bitwarden security? ​ Note: I find Bitwarden a bit clunky for day to day use. Not as slick as LastPass. Other than that I don't have a problem with it. And I kinda like the desktop app. Thanks! submitted by /u/damienhull [link] [comments]

Well I [M27] have been interested in security since high school, and I have been working in the field for 4 years now between engineering and IR, I'm kinda good with what I do had my OSCP 3 years ago, with good background in many security fields, but now and then I feel that I want to get out of my comfort zone, I find people in the industry sharing everything on linkedin, doing podcasts that nobody listens to and posting infosec memes on their twitter where they have 7 followers, as if anybody interested. I'm not sure if it's a social issue but I rarely talk about cybersecurity on my social media or with friends and prefer sharing memes that's not related to cybersecurity, by time I feel that I have 2 personalities, i feel sad sometimes that i hate showing off and there are people who like showing off because they got a 4 letters business certificate with no technical knowledge, anybody feel the same? submitted by /u/xoutisx [link] [comments]

I’m more interested in working for bigger companies doing security than I am for the government- but most important to me is opening doors. If doing cybersecurity for the govt. for a few years gives me plenty of opportunities for working in other companies, I don’t mind doing it. I have two job offers and one is a threat analyst for a bigger company that’s well known in this industry, and the other is a security analyst for a government contractor and I can get a secret clearance. Haven’t decided which one will be a bigger step for my career. My end goal is to become a security engineer. One of these will be my first cybersecurity job. submitted by /u/Good-Turnip-8963 [link] [comments]

Windows下基础免杀技术 by SecIN社区 SecWiki周刊（第439期) by ourren 更多最新文章，请访问SecWiki

Windows下基础免杀技术 by SecIN社区 SecWiki周刊（第439期) by ourren 更多最新文章，请访问SecWiki

What is Fuzzing? Continue reading on Towards Dev »

What is Fuzzing? Continue reading on Towards Dev »

Hyperledger disclosed a bug submitted by bhaskar_ram: https://hackerone.com/reports/1639423

Showmax disclosed a bug submitted by qualwin38000: https://hackerone.com/reports/1646340 - Bounty: $700

Rocket.Chat disclosed a bug submitted by baltpeter: https://hackerone.com/reports/924151

Judge.me disclosed a bug submitted by netboom: https://hackerone.com/reports/1566017 - Bounty: $250

Fawn is a boot2root CTF on HackTheBox. It is “Very Easy” difficulty and is part of Tier 0 starting point challenges. Continue reading on Medium »

PortSwigger Web Security Academy Lab: SQL injection Continue reading on Bilişim Hareketi »

Hey friends, it is the second article in my Active Directory Theory and Exploitation series. Today, I would like to talk about Kerberos… Continue reading on Medium »

No content preview

No content preview

No content preview

The hidden dangers of numerical IDs Continue reading on InfoSec Write-ups »

Don’t forget to check for user access rights Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

The hidden dangers of numerical IDs Continue reading on InfoSec Write-ups »

Don’t forget to check for user access rights Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

The hidden dangers of numerical IDs Continue reading on InfoSec Write-ups »

Don’t forget to check for user access rights Continue reading on InfoSec Write-ups »

2022年上半年，全国网信系统持续加大网络执法力度、规范网络执法行为，坚决依法查处各类违法违规案件，取得明显成效。

一个名为Adrastea的攻击组织声称已经入侵了跨国导弹制造商 MBDA。

研究人员发现了一个由 1.1万多个域名组成的巨大网络，正在向欧洲用户推广虚假投资计划。

通过该漏洞，攻击者可获取最高权限，对受影响设备无限制访问，包括实时观看和重放摄像头视频。

这些应用包括了文档扫描仪、VPN服务、二维码阅读器和通话记录器等，共携带了 Octo、Hydra、Ermac和TeaBot四个银行木马系列。

最近在调研国内外开源的容器安全相关工具，发现了很多优秀的项目，国外的项目有trivy、anchor等，在漏洞检测这块做的很出色了；而国内的项目不多，关注非漏洞检测的工具更少，所以对一款名为问脉的开源容

submitted by /u/ParkingMobile2095 [link] [comments]

Many within the DFIR community make use of virtual systems for testing...for detonating malware, trying things within a "safe", isolated environment, etc. However, sometimes it can be tough to get hold of suitable images for creating that testing environment. I've collected a bunch of links to VirtualBox VMs for Windows, but I cannot attest to all of them actually working. But, if you'd like to try any of them, here they are... MS Edge developer virtual machines (Win7 - 10, limited time) Windows 7 Image, reports no activation needed Win95 virtual machine Various MS virtual machines (MS-DOS, Windows, etc.) Windows 11 Dev Environment (eval) Use Disk2vhd to create a virtual machine from an existing installation ReactOS - clone of Windows 5.2 (XP/2003) There's no shortage of Linux and Unix variant OS VMs available. For example, you can find Solaris VMs here. For MacOS Big Sur, you can try this site. Back in 1994 and '95, while I was in graduate school, I went to Frye's Electronics in Sunnyvale (across the street from a store called "Weird Stuff") and purchased a copy of OS/2 2.1. I did that because the box came with a $15 coupon for the impending OS/2 Warp 3.0. If you'd like to give the OS/2 Warp OS a shot, you can try this v4.52 download, or try this site for other versions of OS/2. If you're a fan of CommodoreOS, you can give this site a shot. For AmigaOS, try here, or here. How about Plan9? General Download Sites OSBoxes SysProbs VirtualBoxes Hope that helps!

We’re a little fed up with OSINT tools claiming they’re the best. So, we spent some time looking at some hard facts from Github. After… Continue reading on Medium »

Greetings dear readers! Today I present to your attention an article written by my good friend Max — in it he made a review of more than a… Continue reading on Medium »

Hey, my name is Satyam Jaiswal and in this blog, I want to share how sometimes in the OSINT investigation especially in GEO OSINT, the idea Continue reading on Medium »

Виявлення, комплексний аналіз і ліквідація шкідливих, спамних, фішингових сторінок, URL-адрес, посилань і сайтів. Continue reading on KR. LABORATORIES IT BLOG »

Summary of the espionage-related news stories for the Week 30 (July 24–30) of 2022. Continue reading on Medium »

Another awesome XSS challenge from Intigriti. Personally, I learn a lot trying to solve these monthly challenges by Intigriti. The… Continue reading on Medium »

Introduction Continue reading on Medium »

The hidden dangers of numerical IDs Continue reading on InfoSec Write-ups »

Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port… Continue reading on Medium »

Hai Haiii, bertemu lagi nih kita. Kali ini penulis akan mencoba untuk menjelaskan mengenai sensitive data exposure dan bagaimana kita bisa… Continue reading on Medium »

Hacking is always presented in the media by thousands of lines of code flashing on a person’s laptop. Is this reality? Continue reading on Medium »

Hello Security folks, In previous article, we came to know about Stack, How Application memory works and Memory Addresses. In this article… Continue reading on Medium »

Crocodile is really awesome challenge by HackTheBox to practice skills related to Hacking. In today’s writeup we are going to solve this… Continue reading on Medium »

This site starts some service worker and seems to download/upload something just by loading what is just literally a black screen. It also created 66kb worth of cookies which I had to delete. Any insight on what it might be trying to do? This is one of the first results in google if you search for a black screen. The idea of searching for a black screen or any color is just to have a solid background for whatever reason like taking screenshots, but I think it's trying to do something fishy. submitted by /u/PlatformKnuckles [link] [comments]

I found this CVE-2022-34558 which states that a WMAgent is vulnerable. I have searched the internet but I didn't understand much. submitted by /u/Chroll-On [link] [comments]

Hello everyone, I started in the last months to educate my self more and more about privacy and cyber security. I have also started to host services and data locally. I also started to improve my network infrastructure through various services (pi-hole... etc.). Now I have also started the mission to educate my parents about this and make them aware of their digital footprint and threats. I also had the idea to use the Fritzbox VPN to connect the networks and make elements of my network infrastructure accessible to them so they do not need to build a redundant infrastructure up and maintain it. Now I would like to avoid securing myself first and then exposing myself to unmanageable/unknown risks with such a connection to my parents network. I would love to understand the risk of network wide threats better (e.g. malware that effects the whole network cross vpn ? ...) . Moreover, I cannot evaluate the security of the Fritzbox VPN (google resluts say its ok?) (Unfortunately, their Fritzbox is a bit older and will not support Wireguard). The alternative is to simply set up easy things as a pihole on a raspi that I can prepare and easily set up. But not going with the "permanent connection" solution. I would love to learn from you guys how big the risk of such network wide threats is and how you would rate the Fritzbox VPN. Thanks! submitted by /u/DonSiffo [link] [comments]

I’m a junior penetration tester. Currently looking to pivot into a different area as I’m realizing that pentesting isn’t for me. My initial thought was to switch to something less technical, but before I make that change I wanted to give forensics some consideration as I’ve always thought it would be cool to explore that. I know nothing about it though so I wanted to see if there are any of y’all out there that currently work in cyber forensics and ask if A) someone switching from penetration testing would feel comfortable in a forensics role and if a pentesting background would lead to success in forensics and B) any information on how to get started. What resources to start looking at, certifications to explore, jobs to consider that would lead to a smooth transition from pentesting into forensics, etc. submitted by /u/anon2user [link] [comments]

I was considering on buying an HDMI dongle from Amazon vs the original apple one to save a few bucks. I’m thinking this could contain some sort of implant but trying to understand if there is a way for me to check this before putting it on my device. Are others experienced with how to trace if this is stealing my data? submitted by /u/jeepynomad [link] [comments]

Article URL: https://www.rapid7.com/blog/post/2022/07/27/active-exploitation-of-atlassians-questions-for-confluence-app-cve-2022-26138/ Comments URL: https://news.ycombinator.com/item?id=32298575 Points: 1 # Comments: 0

安全企业对数据安全的认知程度还需要跟上国家的高度，加大投入，更进一步。

一次梦幻的红队行动，主场作战，成果丰富。

安全知识图谱技术概述 by ourren Malware Analysis Tools 2022 by ourren 更多最新文章，请访问SecWiki

安全知识图谱技术概述 by ourren Malware Analysis Tools 2022 by ourren 更多最新文章，请访问SecWiki

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

Highly NSFW comics https://drive.google.com/drive/mobile/folders/0B42kNriZcp4cLWlwSDlQYXdIOFE?usp=sharing&resourcekey=0-MrZHfmBcSPlHVIKzTBJIyQ submitted by /u/RainyAbrar [link] [comments]

If they are synced artefacts - what device identifier is available? submitted by /u/zoomjua [link] [comments]

In this video, I have covered the following content: 1) What is Cyber Crime? 2) What are the different types of cybercrime? 3) Forensics Investigation Procedure 4) Effective Strategy for CISOs for Forensics Requirements 5) Top tools 6) Good Evidence Principles 7) What is "Chain of Custody?" ​ https://www.youtube.com/watch?v=u2zgEFm5RHQ submitted by /u/prabhnair1 [link] [comments]

As a follow-on to my earlier blog post, I've seen a few more posts and comments regarding EDR 'bypass' and blinding/avoiding EDR tools, and to be honest, my earlier post stands. However, I wanted to add some additional thoughts...for example, when considering EDR, consider the technology, product, and service in light of not just the threat landscape, but also the other telemetry you have available.  This uberAgent article was very interesting, in particular the following statement: “DLL sideloading attack is the most successful attack as most EDRs fail to detect, let alone block it.” The simple fact is, EDR wasn't designed to detect DLL side loading, so this is tantamount to saying, "hey, I just purchased this brand new car, and it doesn't fly, nor does it drive underwater...".  Joe Stock…

submitted by /u/SuaveHobo [link] [comments]

submitted by /u/0xdea [link] [comments]

GoCD disclosed a bug submitted by khalidou: https://hackerone.com/reports/1654145

Meow is boot2root CTF on HackTheBox. It has the difficulty “very easy” and is part of the Tier 0 starting point machines. Continue reading on Medium »

submitted by /u/SarahEliset [link] [comments]

Over 2,26 #million users #data leaked from Abwaab Jordan Platform, Continue reading on Medium »

Hello Cyber Security Enthusiast. I’m back again with another article of XSS. In this article, I’ll explain how I got an unexpected XSS and… Continue reading on InfoSec Write-ups »

Introduction : Continue reading on Medium »

Hello folks, Continue reading on Medium »

After many catastrophic, tragic incidents in the past, I believe that every one would have heard about this so-called “re-entrancy” attack… Continue reading on Medium »

Sequel is a really nice challenge by HacktheBox to Practice Hacking skills. So in this writeup we are going to dive into it. Continue reading on Medium »

submitted by /u/Techryptic [link] [comments]